Security Basics mailing list archives
Re: RE: Sniffing in switched network
From: BYRON COPELAND <nodialtone () comcast net>
Date: Fri, 31 Jan 2003 13:57:12 -0500
Lim, Ettercap is another (linux/win version also available) utility that will sniff traffic across switches/routers. It also has an option to detect anyone else poisoning the lan as well. -b ----- Original Message ----- From: Lim Meng Koon <ccelimmk () nus edu sg> Date: Thursday, January 30, 2003 8:24 pm Subject: RE: Sniffing in switched network
have you checked out dsniff? -----Original Message----- From: nork () gazeta pl [nork () gazeta pl] Sent: Thursday, January 30, 2003 8:52 PM To: security-basics () securityfocus com Subject: Sniffing in switched network Hello, I've read through some documentation about sniffing the switched network. There are some arp-cache methods to discover a sniffing host (switched or "normal" network is not important here I think), if it is the switched network will I get the result I want, or first I have to become a sniffer also (i.e. arp-poison the switch cache) - to get the responses that will tell me who is the sniffer? Most documentation I read is somewhat old (2 years), is everything aleady well known and described in this subject or are there any running projects? Thanks for help, Norbert
Current thread:
- Re: RE: Sniffing in switched network BYRON COPELAND (Jan 31)
- <Possible follow-ups>
- Re: Sniffing in switched network hallx (Jan 31)
- RE: Sniffing in switched network Lim Meng Koon (Feb 05)