Sniffing in a Switched Network

By
Many of us know that sniffing is possible in a shared i.e. non-switched ethernet environment. But only few of us know that sniffing is also possible in a switched ethernet environment. One of the reasons is that it's not that straighforward. But it's not impossible or difficult. You can use man in the middle technique like ARP spoofing to sniff in a switched environment.

This presentation is an attempt to explain how can somebody sniff in a switched ethernet using ARP spoofing. Dsniff has existed for long as a tool for various sniffing activities. But recently, tools like EttercapNG have made it easier.

Presentation:



Sniffing in a Switched Network (PDF format)
Sniffing in a Switched Network (Microsoft PPT)


Cheers,
-Manu
----------------
Manu Garg
http://www.manugarg.com
"Truth will set you free!"

Technorati tags:

Digg this; Post to del.icio.us

Comments

  1. Anonymous28/7/05 6:51 PM

    nice work GARG ,
    keep going on

    ReplyDelete
  2. Anonymous31/7/05 8:36 PM

    Old recycled info reworded. Good work man!

    ReplyDelete
  3. Anonymous14/11/06 8:55 PM

    Nice slide , I have posted a copy of it on secguru

    ReplyDelete
  4. miscblogger5/4/07 1:29 AM

    Great information. I was looking for a way to do packet sniffing with ethereal when I'm not using any "dumb hubs." But I was wondering, will this also work with routers?

    ReplyDelete
  5. Manu5/4/07 2:44 PM

    This won't work across routers as routers segregate arp broadcast domains. You can always own the router first, however ;-)

    ReplyDelete
  6. Anonymous13/4/07 2:55 AM

    nice stuff Manu, ettercap turned out to be pretty useful just like other MITM tools. I used it for two communicating machines in the same subnet and used the "oneway" tag to retarget the packets through my machine.

    ReplyDelete
  7. Anonymous29/4/07 1:20 AM

    www.oxit.it (Cain) can help with that too if you are looking for something specific

    ReplyDelete

Post a Comment

Popular posts from this blog

ladakh, land of peace and quiet - part I

By
Image
Have you ever felt the power of space? When you feel that the space, just space around you, affects you strongly. Almost all of us have experienced it for short duration in some way or other, for example when we go to a temple. I felt it for a much longer duration. It happened to us when we visited Ladakh last month. By we, I mean Pankaj and I. For those who don't know, Pankaj and I are best buddies. So, we went to this land of peace and quiet. There are some obvious things that make Ladakh different from all other hill stations. Altitude so high that AMS (Acute Mountain Sickness) comes to you easily, different kind of people, and proximity to both Pakistan and China borders. But, there are some things which are not easy to imagine. Things like how can it calm you beyond your imagination. We were very excited about this trip. We decided to go by Manali-Leh road and come back by air. Our route was something like: Hyderabad -> Delhi -> Chandigarh -> Manali -> Leh -...
Read more

Comfort and Bliss, In the lap of Himalayas

By
Image
I've got to write about our honeymoon trip in October last year. This place was so amazing that not writing about is outright unfair. But, writing about the honeymoon trip can be very difficult, as you can imagine :) We went to this very beautiful resort, Kalmatia Sangam Himalaya Resort or just Kalmatia , perched on a mountain in Himalayas, at least 10 kms from any town or village and 100s of kms away from any metro. There were just about a dozen cottages there with no swimming pool, no tvs in the cottages and no multi-cuisine restaurants nearby - all the features to keep cities' clubbing noise loving crowd away. Mornings in Kalmatia Kalmatia resort and the estate surrounding it are owned and managed by a couple - Dieter Reeb (a german photographer) and Geeta Reeb - who live here for the love of the valley and the mountains. No rich Delhiite running a business remotely to milk the tourists. I guess that makes lot of difference. You can see and feel the passion and love tha...
Read more

Leh'ed Again (contd)

By
Image
After spending 2 days acclimatizing in Leh town, on the third day of our trip, we decided to go to Alchi, a thousand years old monastery in the north of Leh. It's about 2 hours drive away from Leh, with many other attractions on the way, including Hall of fame (a museum), Magnetic Hill and the confluence of Zanskar and Indus river - a beautiful site. Hall of fame came first. It's a nice museum with lot of exciting stuff like arms captured from the Pakistani army during Kargil war and the picture of a soldier launching a shell to the other side of the border with "From Raveena Tandon to Nawaj Sharif, with Love" written on it :) Next on the way was Magnetic Hill which we skipped for the later. We were going by Indus river all the time and soon we were at the confluence of two major rivers of the region - Zanskar river and Indus river. It's a beautiful site actually. Zanskar meets Indus almost perpendicularly. Difference in the color of two rivers is so obvious...
Read more