Firewall Wizards mailing list archives

Re: Sniffing DSL Connection


From: Chuck Swiger <chuck () codefab com>
Date: Sun, 14 Sep 2003 12:50:51 -0400

Jeff_Lopes () groove net wrote:
[ ... ]
DSL Modem ---> Linksys Router ---> Internal Machines

In an attempt to sniff traffic going to and from the linksys router ... I
added a hub:

DSL Modem ---> Hub ---> Linksys Router ---> Internal Machines

I then put a Linux machine on the hub and ran ethereal. No traffic!

Any thoughts?

Do you have a real IP address from the DSL modem, or does your Linksys do PPPOE? If it's the latter, all of the IP traffic is being encapsulated within PPP-- ethereal should still see the traffic, but trying to match by IP addr will fail.

If you multihome the Linux machine, you should be able to do PPPOE on one interface and sniff the traffic on the other...

--
-Chuck


_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards


Current thread: