RE: Sniffing A VPN Router

["David Gillett" <gillettdavid () fhda edu>]

  No, your understanding is not correct.  Tools like Ettercap
reroute the LAN traffic to make it available to be sniffed.

David Gillett
 

> -----Original Message-----
> From: Adam Rosen [mailto:ajrosen () buffdata com] 
> Sent: Wednesday, May 10, 2006 5:18 PM
> To: security-basics () securityfocus com
> Subject: RE: Sniffing A VPN Router
>
> > From what I understand, this only sniffs LAN->WAN traffic, 
> not LAN->LAN.
> Is that correct? Is there a way to sniff intra-lan traffic 
> (without span or mirror ports)? 
>
> -----Original Message-----
> From: ricky.barrow () laqtel net [mailto:ricky.barrow () laqtel net]
> Sent: Tuesday, May 09, 2006 7:58 AM
> To: Jason T. Hallahan
> Cc: security-basics () securityfocus com
> Subject: RE: Sniffing A VPN Router
>
> Hi
>
> Research sniffing on a switched network and check out tools 
> like dsniff and ettercap.