FYI

-----Original Message-----
From: Gary Flynn [mailto:[EMAIL PROTECTED]] 
Sent: Thursday, January 10, 2002 7:48 AM
To: [EMAIL PROTECTED]
Subject: Re: Can sniffers act in remote networks?

> On Thu, 10 Jan 2002, Bruno Negr�o wrote:
> 
> Could someone tell me if sniffers can hear remote connections?
> In my conception, sniffers just can hear the traffic where they 
> are directly connected. Is it right?

A program that listens to packets on the wire can certainly only
hear what is on the wire.

However, active means can be used to flood switch tables, subvert 
ARP tables, subvert routing tables, and/or subvert DNS entries so 
that traffic that wouldn't normally be on that wire is suddenly 
sent there. In those scenarios, non-local traffic can be sniffed.

-- 
Gary Flynn
Security Engineer - Technical Services
James Madison University

Please R.U.N.S.A.F.E.
http://www.jmu.edu/computing/runsafe
_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls
_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls

Reply via email to