full-disclosure - How do you sniff your LAN subnet in nowdays switched networks ?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <Pine.LNX.4.62.0511261031520.24341@uplift.swm.pp.se>
Date: Sat Nov 26 09:33:16 2005
From: swmike at swm.pp.se (Mikael Abrahamsson)
Subject: How do you sniff your LAN subnet in nowdays
	switched networks ?

On Sat, 26 Nov 2005, Maxim Vexler wrote:

> infrastructure is very simple[1] - its a remote office connected to
> the Internet. The suspicion reduced to a number of possible causes,

> sniffing I will be forced to temporally replace this switch with my
> trusty hub the next time I get a chance to go there.

Put the hub in between your internet connecting device and the switch, 
this way you can sniff there to see all traffic headed outside.

Either that, or buy switches that can do port mirroring.

-- 
Mikael Abrahamsson    email: swmike@....pp.se