Re: How do you sniff your LAN subnet in nowdays switched networks ?

[Jochen Radmacher <jradmacher () gmx de>]

Maxim Vexler wrote:

> [...]
> In the mean time I would like to ask you if any testing can be made to
> locate a noisy machine on a subnet that is connected with a switch?
>
>  
If you have access to a machine connected to the switch you could try 
arp-spoofing ( http://en.wikipedia.org/wiki/ARP_spoofing )and redirect 
traffic to this machine and sniff it there.

More Info:
http://wiki.ethereal.com/CaptureSetup/Ethernet?action=show
http://su2.info/doc/arpspoof.php

google-search: sniff switched environment
google-search: arp spoofing

Greets,
JR
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/