I am on a shared LAN where everyone should have equal access and, hopefully, not be able to bother anyone else's activity.
The person who has a desktop has the router in their room so they can plug in directly; everyone else is using the WiFi. Let's just say I don't trust the intentions of the person with the desktop.
Everyone in the house - desktop user included - doesn't know how to use basic tools like tcpdump, nmap, and netstat, so this is what I usually use to look for malicious activity.
The problem is, I only have a superficial knowledge of networking and am unsure if other packet inspection could be going on. The routing tables always look normal, but I did notice he installed dragon IDS. The website for this product claimed it is able to monitor LAN packets and send emails for certain events.
I know that an IDS has uses for the box it is on regarding security, but can it be used maliciously?