Maxim Vexler wrote:
[...]
In the mean time I would like to ask you if any testing can be made to
locate a noisy machine on a subnet that is connected with a switch?
If you have access to a machine connected to the switch you could try
arp-spoofing ( http://en.wikipedia.org/wiki/ARP_spoofing )and redirect
traffic to this machine and sniff it there.
More Info:
http://wiki.ethereal.com/CaptureSetup/Ethernet?action=show
http://su2.info/doc/arpspoof.php
google-search: sniff switched environment
google-search: arp spoofing
Greets,
JR
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/