Penetration Testing mailing list archives

Re: Layer 2 Trace


From: "Gary E. Miller" <gem () rellim com>
Date: Sat, 3 Dec 2005 11:44:45 -0800 (PST)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Yo James!

On Fri, 2 Dec 2005, James Eaton-Lee wrote:

Layer two only provides connectivity to machines attached to the same
segment.

You have to be very carefull on what denotes a segment.  What with
bridges and tunnels that segment could have a crazy topology.  I have
ethernet segments that span 2 states using bridge style tunneling.

In the case of ethernet, this means the local network segment,
such as a 192.168.0.1/24 class C subnet of 255 hosts - in order to
communicate with hosts on a wide area/extended/inter network (ie. across
more than one local network), traffic needs to be routed (which occurs
at layer three).

You are confusing layer 2 and layer 3.  There are no IPs on layer 2!

I often put several layer 3 IP subnets on one physical layer 2 net.  You
can do this with or without using VLAN tagging.

RGDS
GARY
- ---------------------------------------------------------------------------
Gary E. Miller Rellim 20340 Empire Blvd, Suite E-3, Bend, OR 97701
        gem () rellim com  Tel:+1(541)382-8588 Fax: +1(541)382-8676

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFDkfWw8KZibdeR3qURAm4nAJwPG88aficwJ3du7Di8UHlGBrB+rACg1qIG
D18qAo8Humhy1m4MlOk6eUI=
=6wNE
-----END PGP SIGNATURE-----


------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner: 

Hackers are concentrating their efforts on attacking applications on your 
website. Up to 75% of cyber attacks are launched on shopping carts, forms, 
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are 
futile against web application hacking. Check your website for vulnerabilities 
to SQL injection, Cross site scripting and other web attacks before hackers do! 
Download Trial at:

http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------


Current thread: