Security Incidents mailing list archives

RE: Why can I see other traffic at switch environment just tcpdump?


From: "Rob Shein" <shoten () starpower net>
Date: Wed, 9 Oct 2002 10:38:53 -0400



Switches should not be relied on as a security mechanism 
unless the switch specifically has (and has been configured 
to use) port security by the use of static assignment of MAC 
addresses to ports.

Kelly

Which, I'd like to point out (before anyone tries this in a real
environment) is a nightmare and a disaster waiting to happen.  No matter
how clearly you may remember doing this, it's a sure-fire bet that at
some point a machine will be moved or replaced (or, for that matter,
just its NIC), and the person doing it won't know why networking doesn't
work.


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


Current thread: