Hi,

I just need to be sure that one cannot capture all the traffic incoming/outgoing from my server.

I would not any hacker to know who is connecting or so.

Saw a lot of videos on the net, read a lot of articles and cannot understand how people can steal passwords / other info whereas lot of people say that you have to be connected to the switch of the remote network you spy.

I want to protect my ssl servers.

Should I need to worry ?

Thanks,

Larry

Capturing traffic requires root rights or access to network equipment. In essence though your question points to what you should do first: ensure the machine is properly configured, hardened and regular auditing is in place.


Explain?


"Thinking", "worrying" or "guessing" is unnecessary as computing is binary in the sense that conditions can be tested: a user account has a strong password or it hasn't, an application is either vulnerable or it isn't, a connection is either safe (SSH) or it isn't (telnet). Analyze the situation, test, make a list and rate measures by effectiveness, apply, test.