June 29, 2005

Updates on last paper - "Sniffing in a Switched Network"

Greetings everyone,

I got some good response to my paper - "Sniffing in a switched network". Here is a little update.

It got published on infosecwriters.com and astalavista security group's website:
http://www.infosecwriters.com/texts.php?op=display&id=298
http://www.astalavista.com/index.php?section=directory&linkid=4433

Jerome Athias (of http://wired.s6n.com/files/jathias/ ) liked it and did the nice work of translating it in French. You can find it's french translation here:
Sniffing in a switched network (in French)

Thank you for the support guys! This is definitely encouraging.

---------------------------------------------------
Further Updates. Dated: Aug 2, 2005
Appeared on digg.com homepage:
http://digg.com/security/Sniffing_in_a_Switched_Network

----------------------------------------------------

Cheers,
Manu
---------
Manu Garg
http://www.manugarg.com
"Truth will set you free!"

June 13, 2005

Sniffing in a Switched Network

Many of us know that sniffing is possible in a shared i.e. non-switched ethernet environment. But only few of us know that sniffing is also possible in a switched ethernet environment. One of the reasons is that it's not that straighforward. But it's not impossible or difficult. You can use man in the middle technique like ARP spoofing to sniff in a switched environment.

This presentation is an attempt to explain how can somebody sniff in a switched ethernet using ARP spoofing. Dsniff has existed for long as a tool for various sniffing activities. But recently, tools like EttercapNG have made it easier.

Presentation:



Sniffing in a Switched Network (PDF format)
Sniffing in a Switched Network (Microsoft PPT)


Cheers,
-Manu
----------------
Manu Garg
http://www.manugarg.com
"Truth will set you free!"

Technorati tags:

Digg this; Post to del.icio.us