Re: How do you sniff your LAN subnet in nowdaysswitched networks ?

["Morning Wood" <se_cur_ity () hotmail com>]

> If you have access to a machine connected to the switch you could try 
> arp-spoofing ( http://en.wikipedia.org/wiki/ARP_spoofing )and redirect 
> traffic to this machine and sniff it there.
>
> More Info:
> http://wiki.ethereal.com/CaptureSetup/Ethernet?action=show
> http://su2.info/doc/arpspoof.php


he might be running Windows.
get cain http://oxid.it  
arp spoof then sniff while your routing packets

cheers
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/