Security Basics mailing list archives
[Full-Disclosure] Caching a sniffer; Re:
From: "Mike Fratto" <mfratto () nwc com>
Date: Thu, 11 Mar 2004 12:43:17 -0500
-----Original Message----- From: full-disclosure-admin () lists netsys com [mailto:full-disclosure-admin () lists netsys com] On Behalf Of Kenton Smith Sent: Thursday, March 11, 2004 11:50 AM To: pbruna () masev cl Cc: Full Disclosure; SECURITY-BASICS () securityfocus com Subject: Re: [Full-Disclosure] Caching a sniffer I skimmed through some of the articles and they all have some good information. Are you running a switched network? If you are then the easiest way is to look at your traffic stats and find the port that *all* traffic is going to. If this doesn't make sense to you, then you should do some more research on sniffers.
Your assuming that the attacker 1) has control of the switch and 2) is sniffing either the uplink or has configured the switch to mirror all the switch ports or VLAN to the mirror port. Neither of which may be the case. --------------------------------------------------------------------------- Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off any course! All of our class sizes are guaranteed to be 10 students or less to facilitate one-on-one interaction with one of our expert instructors. Attend a course taught by an expert instructor with years of in-the-field pen testing experience in our state of the art hacking lab. Master the skills of an Ethical Hacker to better assess the security of your organization. Visit us at: http://www.infosecinstitute.com/courses/ethical_hacking_training.html ---------------------------------------------------------------------------- _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Caching a sniffer Patricio Bruna V. (Mar 11)
- Re: [Full-Disclosure] Caching a sniffer Tim (Mar 11)
- Re: [Full-Disclosure] Caching a sniffer Eric LeBlanc (Mar 11)
- Re: [Full-Disclosure] Caching a sniffer Kenton Smith (Mar 11)
- RE: [Full-Disclosure] Caching a sniffer Mike Fratto (Mar 11)
- RE: [Full-Disclosure] Caching a sniffer Kenton Smith (Mar 11)
- RE: [Full-Disclosure] Caching a sniffer David Bartholomew (Mar 11)
- [Full-Disclosure] Caching a sniffer; Re: Kenton Smith (Mar 11)
- [Full-Disclosure] Caching a sniffer; Re: Kenton Smith (Mar 11)
- RE: [Full-Disclosure] Caching a sniffer Mike Fratto (Mar 11)
- [Full-Disclosure] Caching a sniffer; Re: Mike Fratto (Mar 11)
- [Full-Disclosure] Caching a sniffer; Re: Mike Fratto (Mar 11)
- [Full-Disclosure] Caching a sniffer; Re: Tim (Mar 11)
- [Full-Disclosure] Caching a sniffer; Re: Eric LeBlanc (Mar 11)
- [Full-Disclosure] Caching a sniffer; Re: Kenton Smith (Mar 11)
- [Full-Disclosure] Caching a sniffer; Re: Tim (Mar 11)
- [Full-Disclosure] Caching a sniffer; Re: Eric LeBlanc (Mar 11)
- [Full-Disclosure] Caching a sniffer; Re: Kenton Smith (Mar 11)
- Re: Caching a sniffer Bob Radvanovsky (Mar 11)
- Re: Caching a sniffer Fernando Gont (Mar 17)
- Re: Caching a sniffer ksaenz (Mar 22)
- RE: Caching a sniffer David Gillett (Mar 23)
- Re: Caching a sniffer ksaenz (Mar 22)