Hello! Am Donnerstag, 8. November 2001 23:24 schrieb Matt Hemingway: > If it's a switched network, which the subject of this e-mail > states, than Ethereal won't work. The best tool for a switched > network is ettercap (ettercap.sourceforge.net). > > Personally I use Arpwatch (no url available) to find all hosts on > the network and than use Ettercap to sniff the victim. > > If this is a hubbed network than Ethereal works like a charm.
I don't understand that. Can anybody explain it to me? Why is ethereal not good for a switched LAN, but for a hubbed one it is? I'm starting to work with ethereal at the moment (in a switched network). Best regards, Marc Mc Guinness
