Home page logo

basics logo Security Basics mailing list archives

Re: RE: Sniffing in switched network
From: BYRON COPELAND <nodialtone () comcast net>
Date: Fri, 31 Jan 2003 13:57:12 -0500


Ettercap is another (linux/win version also available) utility that 
will sniff traffic across switches/routers.  It also has an option to 
detect anyone else poisoning the lan as well.


----- Original Message -----
From: Lim Meng Koon <ccelimmk () nus edu sg>
Date: Thursday, January 30, 2003 8:24 pm
Subject: RE: Sniffing in switched network

have you checked out dsniff?

-----Original Message-----
From: nork () gazeta pl [nork () gazeta pl]
Sent: Thursday, January 30, 2003 8:52 PM
To: security-basics () securityfocus com
Subject: Sniffing in switched network


I've read through some documentation about sniffing the

switched network. There are some arp-cache methods to

discover a sniffing host (switched or "normal" network

is not important here I think), if it is the switched

network will I get the result I want, or first I have

to become a  sniffer also (i.e. arp-poison the switch

cache) - to get the responses that will tell me who is

the sniffer?

Most documentation I read is somewhat old (2 years), is

everything aleady well known and described in this

subject or are there any running projects? 

Thanks for help,


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]