I have a co-worker that has Fedora 9 installed. I think he has some type of program that is capturing my websites and capturing my log in information. I do know that he is running a gateway program called "fire starter". Is there a program or programs that can do this task? If so, is there any way to block my log in information. I am currently running Windows XP. Thanks!

If you and your co-worker share hub (not a proper switch), he would be able to use Wireshark or tcpdump to capture your network traffic.

The only other way he could capture your traffic is if he set his machine up as a network bridge and your network cable was plugged into his machine.

In either case, I should think that reporting him to your superiors would be the correct course of action. Almost all companies have policies against this type of behavior. If your company does not prohibit these activities, then consult with your IT department. Let them know your co-worker might be capturing your network traffic and ask them to help you solve the problem.

There is also a program called ettercap which will can filter out all passwords and long in names on a network.

Firestarter is just a firewall(probably just a GUI front end for IPtables).

If you report it to the company and nothing is done, this is a legal issue if you uses that information illegally, such as a paypal account or something of that nature. It is very serious business.

Firestarter is a gui for making internet sharing easy. You can configure your iptables through it and you also can configure your dhcp easily through it.

Yes he can know what website you are accessing, coz it lists all clients and their connections to internet. But i don't think he would be able to extract your traffic information like passwords or usernames. coz i didn't see any such option available in firestarter when I was using it for configuring my gate way. Now I directly configure iptables.

If you think he is using something to get your info, then that would be anyother tool.

cheers!!

I think if you use SSL he shouldn't be able to do that, at least not easily. Are you sure he isn't just using a keylogger or something ?