Also some switches, when flooded with spoofed ARP/RARP will fail-open, and
start operating like a hub - i.e. broadcasting all traffic to all ports.
Andrew
-----Original Message-----
From: Paul D. Robertson
To: Ronneil Camara
Cc: '[EMAIL PROTECTED]'
Sent: 10/23/00 2:21 PM
Subject: Re: [OFF TOPIC] sniffing
On Sat, 21 Oct 2000, Ronneil Camara wrote:
> Sorry if this is an off-topic question.
>
> Is there a way to sniff packets from a network using switches instead
of
> hubs?
> I tried sniffing using ethereal, but I am not able to sniff packets.
In addition to setting the switch to send all traffic through a single
port by port configuration or from using an uplink port, there are some
tools for ARPing yourself as everyone on the switch then forwarding
traffic to the real target address after logging/inspection/alteration.
Paul
------------------------------------------------------------------------
-----
Paul D. Robertson "My statements in this message are personal
opinions
[EMAIL PROTECTED] which may have no basis whatsoever in fact."
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
