Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Penetration Testing: Re: How to sniff packets from afar?

Re: How to sniff packets from afar?

From: Dug Song <dugsong_at_monkey.org>
Date: Thu, 8 Nov 2001 18:25:23 -0500

On Thu, Nov 08, 2001 at 03:40:00PM -0500, ET LoWNOISE wrote:

> You dont need to own the router, you can use your pc to become a
> routerthen spoof the routing protocols used to reroute the traffic
> to you and then sniffit.

besides route hijacking (oy), there's also RMON, which was designed
ages ago for exactly this purpose. that is, if you're lucky enough to
find an open device that supports the filter and capture groups, and
can tolerate potentially lossy sniffing:

        http://www.csu.edu.au/special/auugwww96/proceedings/wang/wang.html

perhaps Robert Graham would like to chime in here? :-)

-d.

---
http://www.monkey.org/~dugsong/
----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/
Received on Nov 09 2001
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]