Re: Risks of File Transfer on a Fully Switched Network

[Huba Leidenfrost <huba () UIDAHO EDU>]

Chad,

If you have your presentation/demo for sniffing on a switched network I'd be
interested in adding it to my presentations toolbelt.  I'm assuming you used
something like dsniff/arpredirect & fragrouter.  Who was your target
audience exactly?  Management or other technical network/system
administration folks?  I'm more interested in the format of your
presentation then the actual tools.  And I'm curious if you did any other
demonstrations like CDP neighbor DoS or such.

Finally, after your demonstration were you successful in obtaining a sunset
timetable for blocking cleartext authentication (at least on more sensitive
networks)?

Curious,

Huba Leidenfrost
ITS Security Analyst
University of Idaho
208.885.2126/7539(fax)


________________________________

        From: wcon [mailto:wcon () CONNCOLL EDU]
        Sent: Wednesday, November 30, 2005 6:04 AM
        To: SECURITY () LISTSERV EDUCAUSE EDU
        Subject: Re: [SECURITY] Risks of File Transfer on a Fully Switched
Network
        
        
        Ever hear of "man in the middle attacks", arps are broadcasts, a
switch won't save you unless it can prevent these (i.e. Cisco 4500 or
better).
        
        
        
<SNIP>