OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Full-disclosure] How do you sniff your LAN subnet in nowdays switched networks ?

From: David Huecking (d.hueckinggmx.net)
Date: Sat Nov 26 2005 - 18:58:16 CST


On Samstag 26 November 2005 10:24, Maxim Vexler wrote:
[...]
> [1] : What they have is : ((clients)) --->>> [hp switch] -_-> [router]
> -_-> [asdl modem] -> {{{ Internet }}}
>
> --
> Cheers,
> Maxim Vexler (hq4ever).

Depends on the hp switch model you can set up a port for "Network Monitoring
Port" (same as "port mirroring" or Catalyst Switched Port Analyzer (SPAN)
Feature on a Cisco).
Should be:
Main Menu
    2. Switch Configuration
        3. Network Monitoring Port

...or you can play with yersinia (http://yersinia.sourceforge.net/). It
manipulates spanning tree, trunking, VLANs... but is not easy to use or that
stable...

--
Eat, sleep and go running,
David Hücking.

Encrypted eMail welcome!
GnuPG/ PGP-Key: 0x57809216. Fingerprint:
3DF2 CBE0 DFAA 4164 02C2 4E2A E005 8DF7 5780 9216
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/