Re: in-line coax monitoring device

[byte busters <byte.busters () gmail com>]

Recipe:
Hardware
1) Coax T connector
2) Generic PC / Linux Box
3) Ethernet Card Most any [coax capable] will work

software: tcpdump
Optional software: ethereal, Ntop, etherape, Snort

1) Install linux. create user account capable of sudo access
2) cature traffic using sudo account [or root] with tcpdump / ethereal
software
3) do analysis

NOTE: any data on Coax is freely visible

Of course you may also want MITM Software [Man-In-The-Middle] for SSL
traffic.


On 9/26/05, Alex Krycek <alex_krycek () hush com> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Добрый вечер...looking for an in-line coax monitoring device that
> will give me the ability to monitor/capture and decode all traffic
> that pass by - any suggestions on how to create one, purchase one,
> sites that sell them or tell you how to build one....? Спасибо
> - -The Rat
>
> |
> |(coax line outside house)
> |
> |
> - ---------------------------------- (Demarc)
> |
> |
> |(coax line inside house)
> |
> |
> |
> |
> |
> |
> |
> - -----------------
> | in-line coax |
> | monitoring |
> | device or tap |
> | | ( Ethernet or coax port that )
> | -------------- ( will give me the ability to )
> | -------------- ( monitor/capture and decode )
> | | ( all traffic that pass by. )
> | |
> | |
> - -----------------
> |
> |
> |
> |(coax line going into the cable modem)
> |
> |
> |
> -----
> | |
> | |
> | |------------- (Motorola Cable Modem)
> | |
> | |
> / \
> -------
>
> -----BEGIN PGP SIGNATURE-----
> Note: This signature can be verified at https://www.hushtools.com/verify
> Version: Hush 2.4
>
> wkYEARECAAYFAkM4JdsACgkQGwgQ9yZzfqZX8ACaAy/cVrQNyDZVM90P3HjGNq8Yn1QA
> mwUwix+IlGgdNDBfwO6gipHL7AxF
> =OtNX
> -----END PGP SIGNATURE-----
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/



--
Thanks for using ByteBusters . Please email steve () bytebusters com
or call (506) 657-BYTE for further assistance.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/