UCF STIG Viewer Logo

Network analysis tools must not be installed.


Overview

Finding ID Version Rule ID IA Controls Severity
V-12049 GEN003865 SV-12550r2_rule DCPA-1 Medium
Description
Network analysis tools allow for the capture of network traffic visible to the system.
STIG Date
UNIX SRG 2013-03-26

Details

Check Text ( C-8008r2_chk )
Determine if any network analysis tools are installed.

Procedure:
# find / -name ethereal
# find / -name wireshark
# find / -name tshark
# find / -name netcat
# find / -name tcpdump
# find / -name snoop

If any network analysis tools are found, this is a finding.
Fix Text (F-11302r2_fix)
Remove the network analysis tool binary from the system. Consult vendor documentation for removing packaged software, or remove the binary directly.

Procedure:
# rm