Re: [Pauldotcom] VLANs in VM

2010-09-18 Thread Robin Wood
On 17 September 2010 22:50, Nils wrote: > > If you are monitoring a trunk link with many VLANs you are basically > seeing all the traffic plus the VLAN tags > I'm dealing quite a lot with VLANs in an enterprise environment and the > part I'm not getting here is the "hopping VLANs" part. > mh, I th

Re: [Pauldotcom] VLANs in VM

2010-09-17 Thread Nils
If you are monitoring a trunk link with many VLANs you are basically seeing all the traffic plus the VLAN tags I'm dealing quite a lot with VLANs in an enterprise environment and the part I'm not getting here is the "hopping VLANs" part. mh, I think we need to talk about this in person at Brucon.

Re: [Pauldotcom] VLANs in VM

2010-09-17 Thread Chuck Sanderson
ember 17, 2010 7:51 AM To: PaulDotCom Security Weekly Mailing List Subject: Re: [Pauldotcom] VLANs in VM On 17 September 2010 08:09, Nils wrote: >  I'm still not quite sure what Paul is aiming for but my take on this > is, just provide a trunk link to the virtual machines and let the &g

Re: [Pauldotcom] VLANs in VM

2010-09-17 Thread Robin Wood
On 17 September 2010 08:09, Nils wrote: >  I'm still not quite sure what Paul is aiming for but my take on this > is, just provide a trunk link to the virtual machines and let the > system's driver take care of the 802.1q tagged packets. Then you can > handle a bunch of VLANs on a single system an

Re: [Pauldotcom] VLANs in VM

2010-09-17 Thread Robin Wood
On 16 September 2010 18:26, Jason Jones wrote: > May not be quite what you're looking for and I haven't messed with > this at all but there's a project called Open vSwitch that is > attempting to bring the virtual switching setup that vmware esx/esxi > provide to Xen/VirtualBox/KVM >          http

Re: [Pauldotcom] VLANs in VM

2010-09-17 Thread Robin Wood
On 16 September 2010 17:52, Colin Vallance wrote: > I'm in the process of fleshing out some other pieces to my lab right now but > what I've got would probably work for you.  Keep in mind I'm a Cisco > wireless guy so it's a bit focused on that but you could dump what you don't > need. > > I've go

Re: [Pauldotcom] VLANs in VM

2010-09-17 Thread Nils
I'm still not quite sure what Paul is aiming for but my take on this is, just provide a trunk link to the virtual machines and let the system's driver take care of the 802.1q tagged packets. Then you can handle a bunch of VLANs on a single system and see how you can manipulate them. You would need

Re: [Pauldotcom] VLANs in VM

2010-09-16 Thread Jason Jones
May not be quite what you're looking for and I haven't messed with this at all but there's a project called Open vSwitch that is attempting to bring the virtual switching setup that vmware esx/esxi provide to Xen/VirtualBox/KVM http://openvswitch.org/ Doesn't integrate tightly with Virtua

Re: [Pauldotcom] VLANs in VM

2010-09-16 Thread Carlos Perez
for voiphopper and other 802.1q I go physical, for jumping segments attacking routing protocols and other stuff with ESX I can do 802.1q in the virtual switches and use the physical one in conjunction On Sep 16, 2010, at 11:45 AM, Robin Wood wrote: > On 16 September 2010 16:32, Carlos Perez >

Re: [Pauldotcom] VLANs in VM

2010-09-16 Thread Robin Wood
On 16 September 2010 16:32, Carlos Perez wrote: > righ now I have an old Cisco 3550 for playing with that, best bet would be to > get an old cisco, procurve, 3com ..etc from ebay > each vendor has it own twist on "Standard Protocols" How is best to tie that into a VM lab? Or do you just mean plu

Re: [Pauldotcom] VLANs in VM

2010-09-16 Thread Colin Vallance
I'm in the process of fleshing out some other pieces to my lab right now but what I've got would probably work for you. Keep in mind I'm a Cisco wireless guy so it's a bit focused on that but you could dump what you don't need. I've got a Dell server running VMware ESXi 4, a Dell Layer 2 switch (

Re: [Pauldotcom] VLANs in VM

2010-09-16 Thread Carlos Perez
righ now I have an old Cisco 3550 for playing with that, best bet would be to get an old cisco, procurve, 3com ..etc from ebay each vendor has it own twist on "Standard Protocols" On Sep 16, 2010, at 11:27 AM, Robin Wood wrote: > On 16 September 2010 16:08, Matthew Manor wrote: >> Have you tri

Re: [Pauldotcom] VLANs in VM

2010-09-16 Thread Robin Wood
On 16 September 2010 16:08, Matthew Manor wrote: > Have you tried Vyatta?  It can do most of what Cisco IOS can do but > virtually, including VLANs, and you can certainly run an entire lab of > VMs off of it. I've just had a quick look through it but can't tell if it would help or not. I want to

Re: [Pauldotcom] VLANs in VM

2010-09-16 Thread Robin Wood
On 16 September 2010 15:53, Carlos Perez wrote: > Do you mean having a switch with 802.1q? Probably. I want to have a go at VLAN hopping and just generally see how it affects packet sniffing and accessing devices. I remember covering VLANs when I did my CCNA training but as I didn't get round to

Re: [Pauldotcom] VLANs in VM

2010-09-16 Thread Matthew Manor
Have you tried Vyatta? It can do most of what Cisco IOS can do but virtually, including VLANs, and you can certainly run an entire lab of VMs off of it. -Matt Manor On 9/16/10, Carlos Perez wrote: > Do you mean having a switch with 802.1q? > > Sent from my iPhone > > On Sep 16, 2010, at 5:03 AM

Re: [Pauldotcom] VLANs in VM

2010-09-16 Thread Carlos Perez
Do you mean having a switch with 802.1q? Sent from my iPhone On Sep 16, 2010, at 5:03 AM, Robin Wood wrote: > Is there any way to setup a VLAN environment in a virtual environment? > They are something I've never had much chance to play with and I'd > love to get it labbed up so I can. I know

[Pauldotcom] VLANs in VM

2010-09-16 Thread Robin Wood
Is there any way to setup a VLAN environment in a virtual environment? They are something I've never had much chance to play with and I'd love to get it labbed up so I can. I know there are virtual systems for running IOS images but don't think I could then hang a bunch of VMs off those machines.