Penetration Testing: Re: Sniffing on a switch

["Goran Sevic" <goranlegion () ftml net>]

Hi,

sniffing on the switch is perfromed by connecting the sniffee to the
management port. ALternativley ports can be spanned. Spanned ports have
the property of being able to see all data traffic traversing the
switch, thus helping the sniffer.

regs,
GoRaN
On Thu, 27 Oct 2005 19:55:04 -0700, "Andy Meyers"
<andy.meyers () hushmail com> said:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Now i know people say you "cant" sniff on a switch and I know about ARP
> poisoning and MAC flooding. But there has to be another way. I have heard
> too many stories about "he sniffed my AIM conversation on a Cisco switch"
> (an example is in the most recent version of 2600). Does anyone know of
> any
> technique how to do this? Can you ARP poison a switch?
>
> Ashes
> -----BEGIN PGP SIGNATURE-----
> Note: This signature can be verified at https://www.hushtools.com/verify/
> Version: Hush 2.4
> Charset: UTF8
>
> wkYEARECAAYFAkNhkwYACgkQnZu7yPmLRpArTQCgp2JsbOSySZJ7XFvgy1sY4GcGntYA
> oIwtV7CLTBjr5j2yW0v1In/Jm7Yv
> =rigp
> -----END PGP SIGNATURE-----
>
>
> ------------------------------------------------------------------------------
> Audit your website security with Acunetix Web Vulnerability Scanner: 
>
> Hackers are concentrating their efforts on attacking applications on your 
> website. Up to 75% of cyber attacks are launched on shopping carts,
> forms, 
> login pages, dynamic content etc. Firewalls, SSL and locked-down servers
> are 
> futile against web application hacking. Check your website for
> vulnerabilities 
> to SQL injection, Cross site scripting and other web attacks before
> hackers do! 
> Download Trial at:
>
> http://www.securityfocus.com/sponsor/pen-test_050831
> -------------------------------------------------------------------------------
-- 
  Goran Sevic
  goranlegion () ftml net

-- 
http://www.fastmail.fm - The professional email service


------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner: 

Hackers are concentrating their efforts on attacking applications on your 
website. Up to 75% of cyber attacks are launched on shopping carts, forms, 
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are 
futile against web application hacking. Check your website for vulnerabilities 
to SQL injection, Cross site scripting and other web attacks before hackers do! 
Download Trial at:

http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------