From: "Cynthia H. Brown" <cynthb@homer.sonetis.com>
Date: Sun, 2 Feb 1997 07:30:12 -0800 (PST)
To: harka@nycmetro.com
Subject: Re: Trigger-Words...
Message-ID: <199702021530.KAA01205@homer.iosphere.net>
MIME-Version: 1.0
Content-Type: text/plain


-----BEGIN PGP SIGNED MESSAGE-----

On Wed, 29 Jan 1997, harka@nycmetro.com queried:

> Actually, I might not have chosen the correct words for what I
> wanted...
> I am looking for sniffer-programs, that analyze e-mail traffic on
> the Net and filtering out all e-mails potentially interesting for
> _intelligence services_. For example, I've heard, that if an e-mail
> contains the words: "assassinate President" (DISCLAIMER: I hope, our
> President lives a long and happy life, even after his
> impeachment...:)), it will automatically get filtered and checked
> out by the Secret Service.
> Different intelligence agencies might have similar things in place.
> Where could I get some more information about that?

Many Un*xes (SunOS, Solaris, IRIX, Linux, and probably others) have
included their own versions of sniffers, supposedly for network
debugging. These are typically called something like "tcpdump",
"etherfind", "snoop", etc.

You would need to run a sniffer at a "choke point" of an
organisation, for example the external router to the Internet, to
capture all of the packets to / from that organisation.  Putting a
sniffer on some arbitrary router out there in cloud-land would
probably not be all that productive, since there's no guarantee that
all of the IP packets carrying a given TCP connection would take the
same route. 

Cynthia

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: cp850

iQCVAwUBMvSyq5Og7xGCJGQtAQFJPwQAiXbxtfdfVEDL5ZHdktdy6bfH/Wmio3oU
J1bYKpfwY4H4NnIoXipGF+oo48Pe4j8x46UneVZ8d4ZsSy93/JsvmQw38TxSj/8o
cPbtIaagBw9eofsdimzlwx9Y0VvaTRWt+2Cjd8aQKmG5nwUBSF9BlFoX2/TU3QZY
IP+hiecLaag=
=rHlB
-----END PGP SIGNATURE-----
===============================================================
Cynthia H. Brown
Ottawa, Ontario, Canada
E-mail:     cynthb@sonetis.com
Home Page:  http://www.sonetis.com/~cynthb/
PGP Key:    See Home Page

Junk mail will be ignored in the order in which it is received.

  It is morally as bad not to care whether a thing
  is true or not, so long as it makes you feel
  good, as it is not to care how you got your money
  as long as you have got it.

        - Edmund Way Teale, "Circle of the Seasons"