You're correct; I was speaking in a "generic" sense of the "DSniff suite." As you pointed out, macof would be the specific tool that would cause this type of behavior.
~~~~~~~~~~ R. Benjamin Kessler Network Engineer CCIE #8762, CISSP, CCSE Kessler Consulting Email: [EMAIL PROTECTED] http://www.kesslerconsulting.com Phone: 260-625-3273 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dario Lombardo Sent: Monday, November 03, 2003 9:38 AM To: [EMAIL PROTECTED] Subject: Re: [Ethereal-users] Traffic not expected on a switch port R. Benjamin Kessler wrote: >There are a couple of reasons a switch will "flood" TCP traffic out - >generally they're not good... > >1 - Someone is running dsniff - probably not likely since you're not seeing >all other traffic on the switch; you'd probably notice the slowdown in >traffic as well. > > > I don't agree. Dsniff is a sniffer, it sniffs and doesn't do anything to the switch. Possibly you're speaking of macof or arpspoof (included in dsniff). ==================================================================== CONFIDENTIALITY NOTICE This message and its attachments are addressed solely to the persons above and may contain confidential information. If you have received the message in error, be informed that any use of the content hereof is prohibited. Please return it immediately to the sender and delete the message. Should you have any questions, please contact us by replying to [EMAIL PROTECTED] Thank you ==================================================================== _______________________________________________ Ethereal-users mailing list [EMAIL PROTECTED] http://www.ethereal.com/mailman/listinfo/ethereal-users
