RE: Sniffing in switched network

[Lim Meng Koon]

Not too sure if there are any ways at all, especially if we are talking about a mixed 
platform network.
 
If you have a single platform network, perhaps some proprietry solution might be 
available from that platform vendor.
 
Cisco, has a arp watch feature on the new Cat6509 CatOS 7.5, which I have not tried 
out.
 
regards
meng koon
 
 

        -----Original Message----- 
        From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] 
        Sent: Sat 2/1/2003 5:55 AM 
        To: Lim Meng Koon 
        Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] 
        Subject: RE: Sniffing in switched network
        
        


        What are ways to prevent sniffing on a switch?
        
        
        
                                                                                       
                          
                              "Lim Meng Koon"                                          
                          
                              <[EMAIL PROTECTED]        To:       <[EMAIL PROTECTED]>,     
                          
                              .sg>                      
<[EMAIL PROTECTED]>                      
                                                       cc:                             
                          
                              01/30/2003 06:24         Subject:  RE: Sniffing in 
switched network                
                              PM                                                       
                          
                                                                                       
                          
                                                                                       
                          
        
        
        
        
        have you checked out dsniff?
        
        -----Original Message-----
        From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
        Sent: Thursday, January 30, 2003 8:52 PM
        To: [EMAIL PROTECTED]
        Subject: Sniffing in switched network
        
        
        
        
        Hello,
        
        
        
        I've read through some documentation about sniffing the
        
        switched network. There are some arp-cache methods to
        
        discover a sniffing host (switched or "normal" network
        
        is not important here I think), if it is the switched
        
        network will I get the result I want, or first I have
        
        to become a  sniffer also (i.e. arp-poison the switch
        
        cache) - to get the responses that will tell me who is
        
        the sniffer?
        
        
        
        Most documentation I read is somewhat old (2 years), is
        
        everything aleady well known and described in this
        
        subject or are there any running projects?
        
        
        
        Thanks for help,
        
        
        
        Norbert