Re: [PEN-TEST] Spoofing switched networks

["Lindqvist, Johan" <johan.lindqvist () DRIFTBOLAGET COM>]

Hi.

> Actually, sniffing isnt' that heard either.  There are 
> several ways to do
> it such as making the switch you are a trunk port and you need all the
> traffic.  In order words, don't put a switch and VLANs in 
> place and expect
> that to be your security because they can be defeated.

As for switching, I'm fully aware that it's not a security mechanism that
cannot be defeated easily. However that VLANs have no security impact is
news to me. Since VLANS are defined on physical switch port basis, how could
they be used to receive or send traffic on other VLANs?

/Johan

-- 
Johan Lindqvist
Security Specialist


DRIFTBOLAGET AB, MÖLNDALSVÄGEN 81, 412 63 GÖTEBORG, SWEDEN
PHONE: +46 8-23 92 00 FAX: +46 709-73 46 70
DIRECT: +46 31-760 43 07 MOBILE: +46 709-73 87 07 
johan.lindqvist () driftbolaget com http://www.driftbolaget.com