Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Firewall Wizards: Re: Sniffing DSL Connection

Re: Sniffing DSL Connection

From: Chuck Swiger <chuck_at_codefab.com>
Date: Sun, 14 Sep 2003 12:50:51 -0400

Jeff_Lopes_at_groove.net wrote:
[ ... ]
> DSL Modem ---> Linksys Router ---> Internal Machines
>
> In an attempt to sniff traffic going to and from the linksys router ... I
> added a hub:
>
> DSL Modem ---> Hub ---> Linksys Router ---> Internal Machines
>
> I then put a Linux machine on the hub and ran ethereal. No traffic!
>
> Any thoughts?

Do you have a real IP address from the DSL modem, or does your Linksys do PPPOE?
  If it's the latter, all of the IP traffic is being encapsulated within PPP--
ethereal should still see the traffic, but trying to match by IP addr will fail.

If you multihome the Linux machine, you should be able to do PPPOE on one
interface and sniff the traffic on the other...

-- 
-Chuck
_______________________________________________
firewall-wizards mailing list
firewall-wizards_at_honor.icsalabs.com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
Received on Sep 14 2003
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos