Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Vulnerability Development: Re: How i DIDNT turn my CM into a sniffer

Re: How i DIDNT turn my CM into a sniffer

From: me me <inigma_x_at_HOTMAIL.COM>
Date: Mon, 7 May 2001 14:16:18 -0000

I used a Network Anaylzer to view my notwork traffic. Your modem should send
out a few broadcasts when it boots up.

--
Justin
>From: "zeroxt" <"zeroxt_at_supercable.es"@smtp.supercable.es>
>Reply-To: "zeroxt" <"zeroxt_at_supercable.es"@smtp.supercable.es>
>To: "me me" <inigma_x_at_HOTMAIL.COM>
>Subject: Re: How i DIDNT turn my CM into a sniffer
>Date: Sat, 5 May 2001 22:39:44 +0200
>
>Hi man, how did you get the ip of the cablemodem? I dont get it... I know
>my
>dhcp server has 192.168.253.70, cause I get packets from that ip, but I
>have
>tried to ping 192.162.253.x and dont get any other answer.. Any way to get
>it? cause my ISP is not gonna tell me it.
>
>----- Original Message -----
>From: "me me" <inigma_x_at_HOTMAIL.COM>
>To: <VULN-DEV_at_SECURITYFOCUS.COM>
>Sent: Saturday, May 05, 2001 12:11 PM
>Subject: How i DIDNT turn my CM into a sniffer
>
>
> > My cable modem has four promiscuous settings.
> > ---
> > ifMIB.ifMIBObjects.ifXTable.ifXEntry.ifPromiscuousMode.1 = true(1)
> > ifMIB.ifMIBObjects.ifXTable.ifXEntry.ifPromiscuousMode.2 = false(2)
> > ifMIB.ifMIBObjects.ifXTable.ifXEntry.ifPromiscuousMode.3 = false(2)
> > ifMIB.ifMIBObjects.ifXTable.ifXEntry.ifPromiscuousMode.4 = false(2)
> > ---
> > I set the second promo OID to "true" and I didnt recieve any traffic. It
>is
> > five in or morning, but i would think that i would at least see
>something.
> > So i was wondering if anyone has had any seccuess with this? FWI - When
>i
> > send a set command to the CM it, sometimes, sends a arp request to the
>HFC
> > subnet. So im thinking its sending traps letting the CMTS know that its
> > being access (beware).
> >
> > ---
> > Justin
> > _________________________________________________________________
> > Get your FREE download of MSN Explorer at http://explorer.msn.com
>
_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com
Received on May 11 2001
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos