-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Also don't forget about the dsniff suite from Dug Song. I don't have the link handy but it can be found a google search for dsniff.
Best regards, Leon - -----Original Message----- From: Matt Hemingway [mailto:[EMAIL PROTECTED]] Sent: Wednesday, March 13, 2002 12:11 PM To: leon; [EMAIL PROTECTED] Subject: Re: sniffing a switch A great program for sniffing a switched LAN is Ettercap (http://ettercap.sourceforge.net). Used in conjunction with Arpwatch (http://www.securityfocus.com/tools/142) you get a good idea on how this works and how you can detect someone using a tool like Ettercap. - -Matt On Tuesday 12 March 2002 07:58, leon wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > I found this very good article I wanted to share with the group > since I see the question come up a lot. > > I found it informative I hope you do also. > > > For those who think switched Ethernet environments are sniff-proof, > the author offers this warning. Switches may be difficult to sniff, > but they are certainly not immune. As is clear from the above > sections, one method of sniffing in a switched environment is using > ARP spoofing, and the machine that will most probably be ARP > spoofed is the gateway. > > http://www.linuxsecurity.com/articles/network_security_article-4551. > ht ml > > > Regards, > > Leon > > -----BEGIN PGP SIGNATURE----- > Version: PGPfreeware 6.5.8 for non-commercial use > <http://www.pgp.com> > > iQA/AwUBPI4lmdqAgf0xoaEuEQL2pQCffY5f4dArBsXzzBwqPVpQ3D5Fs8oAoL3m > XOh7wYu4O8KoTCmsuhhgosbz > =Ys0V > -----END PGP SIGNATURE----- - -- - -------- -------- -------- Matt Hemingway SupplyEdge [EMAIL PROTECTED] 800-733-3380x136 - -------- -------- -------- -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com> iQA/AwUBPI+If9qAgf0xoaEuEQIM/gCgjopbMH6K18K1lSlAwfOi9DJR4QkAnRvK 5IP7nKg6MHKTCJmKDKO1o908 =7L5c -----END PGP SIGNATURE-----
