Penetration Testing mailing list archives

Re: discovering network layout at layer2


From: Harry de Grote <harry () cc kuleuven ac be>
Date: Thu, 12 Feb 2004 09:32:59 +0100

Aditya [ Aditya Lalit Deshmukh ] wrote:

for this you need :

1. admin / root access on your machine to see all the traffic that is going through the wire 2. if you are connected using a hub with a ethernet lan card then all you need is to put your network card in promisc mode
3. if you are using switches then you have do create a braodcast storm to degrade the switch to act as a hub

arp poisining is less "brute force", but only gives information of traffic between 2 hosts

4. if you are connected using a modem / isdn card then you need a tcp scanner - there are many ones one the net - this 
will not work for sniffing traffic but you will get a pretty good idea about the hosts around you

arp requests for the whole subnet? ;)

--
Harry de Grote
aka Rik Bobbaers

K.U.Leuven - LUDIT       -=- Tel: +32 485 52 71 50
harry () cc kuleuven ac be  -=- http://harry.ulyssis.org

"Work hard and do your best, it'll make it easier for the rest"
-- Garfield

---------------------------------------------------------------------------
Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection

Protect your network with the comprehensive security solution that
integrates six applications for ease of use and lower TCO.

Firewall - Virus protection - Spam protection - URL blocking - VPN
- Wireless security.

Download 30-day evaluation at:
http://www.astaro.com/php/contact/securityfocus.php
----------------------------------------------------------------------------


Current thread: