Re: RE: Sniffing in switched network

[BYRON COPELAND <nodialtone () comcast net>]

Lim,

Ettercap is another (linux/win version also available) utility that 
will sniff traffic across switches/routers.  It also has an option to 
detect anyone else poisoning the lan as well.

-b




----- Original Message -----
From: Lim Meng Koon <ccelimmk () nus edu sg>
Date: Thursday, January 30, 2003 8:24 pm
Subject: RE: Sniffing in switched network

> have you checked out dsniff?
>
> -----Original Message-----
> From: nork () gazeta pl [nork () gazeta pl]
> Sent: Thursday, January 30, 2003 8:52 PM
> To: security-basics () securityfocus com
> Subject: Sniffing in switched network
>
>
>
>
> Hello,
>
>
>
> I've read through some documentation about sniffing the
>
> switched network. There are some arp-cache methods to
>
> discover a sniffing host (switched or "normal" network
>
> is not important here I think), if it is the switched
>
> network will I get the result I want, or first I have
>
> to become a  sniffer also (i.e. arp-poison the switch
>
> cache) - to get the responses that will tell me who is
>
> the sniffer?
>
>
>
> Most documentation I read is somewhat old (2 years), is
>
> everything aleady well known and described in this
>
> subject or are there any running projects? 
>
>
>
> Thanks for help,
>
>
>
> Norbert