Penetration Testing mailing list archives

RE: discovering network layout at layer2


From: "Rob Shein" <shoten () starpower net>
Date: Thu, 12 Feb 2004 08:41:53 -0500

Um....just so you know, this could produce any number of side effects,
ranging from your port on the switch being disabled to the switch locking up
or rebooting.  Different switches (and different software versions on the
same hardware) act differently when confronted with things like this.  At
the very minimum, if you are able to force the switch to degrade into acting
like a hub, you will produce a severe negative impact on network
performance. So be careful :)


for this you need :

1. admin / root access on your machine to see all the traffic 
that is going through the wire 
2. if you are connected using a hub with a ethernet lan card 
then all you need is to put your network card in promisc mode 
3. if you are using switches then you have do create a 
braodcast storm to degrade the switch to act as a hub 4. if 
you are connected using a modem / isdn card then you need a 
tcp scanner - there are many ones one the net - this will not 
work for sniffing traffic but you will get a pretty good idea 
about the hosts around you

-aditya


---------------------------------------------------------------------------
Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection

Protect your network with the comprehensive security solution that
integrates six applications for ease of use and lower TCO.

Firewall - Virus protection - Spam protection - URL blocking - VPN
- Wireless security.

Download 30-day evaluation at:
http://www.astaro.com/php/contact/securityfocus.php
----------------------------------------------------------------------------


Current thread: