Home page logo

basics logo Security Basics mailing list archives

RE: Sniffing in switched network
From: "Lim Meng Koon" <ccelimmk () nus edu sg>
Date: Sun, 2 Feb 2003 11:53:12 +0800

Not too sure if there are any ways at all, especially if we are talking about a mixed platform network.
If you have a single platform network, perhaps some proprietry solution might be available from that platform vendor.
Cisco, has a arp watch feature on the new Cat6509 CatOS 7.5, which I have not tried out.
meng koon

        -----Original Message----- 
        From: ktyler () nautilus-ins com [mailto:ktyler () nautilus-ins com] 
        Sent: Sat 2/1/2003 5:55 AM 
        To: Lim Meng Koon 
        Cc: nork () gazeta pl; security-basics () securityfocus com 
        Subject: RE: Sniffing in switched network

        What are ways to prevent sniffing on a switch?
                              "Lim Meng Koon"                                                                    
                              <ccelimmk () nus edu        To:       <nork () gazeta pl>,                               
                              .sg>                      <security-basics () securityfocus com>                      
                              01/30/2003 06:24         Subject:  RE: Sniffing in switched network                
        have you checked out dsniff?
        -----Original Message-----
        From: nork () gazeta pl [mailto:nork () gazeta pl]
        Sent: Thursday, January 30, 2003 8:52 PM
        To: security-basics () securityfocus com
        Subject: Sniffing in switched network
        I've read through some documentation about sniffing the
        switched network. There are some arp-cache methods to
        discover a sniffing host (switched or "normal" network
        is not important here I think), if it is the switched
        network will I get the result I want, or first I have
        to become a  sniffer also (i.e. arp-poison the switch
        cache) - to get the responses that will tell me who is
        the sniffer?
        Most documentation I read is somewhat old (2 years), is
        everything aleady well known and described in this
        subject or are there any running projects?
        Thanks for help,

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]