Re: Sniffing on a switch

From: Marlen Caemmerer (nosy_at_c-base.org)
Date: 10/29/05

  • Next message: Goran Sevic: "Re: Sniffing on a switch" 
    Date: Sat, 29 Oct 2005 10:48:03 +0200 (CEST)
To: pen-test@securityfocus.com

    On Thu, 27 Oct 2005, Andy Meyers wrote:

    >
    > Now i know people say you "cant" sniff on a switch and I know about ARP
    > poisoning and MAC flooding. But there has to be another way. I have heard
    > too many stories about "he sniffed my AIM conversation on a Cisco switch"
    > (an example is in the most recent version of 2600). Does anyone know of any
    > technique how to do this? Can you ARP poison a switch?
    >

    Some of the switches and routers from cisco have a monitor command where
    you give a port you want to have a copy of the traffic from and a second
    monitor command for the port where you want the copy of the traffic to
    appear.

    Cheers
             nosy

    ------------------------------------------------------------------------------
    Audit your website security with Acunetix Web Vulnerability Scanner:

    Hackers are concentrating their efforts on attacking applications on your
    website. Up to 75% of cyber attacks are launched on shopping carts, forms,
    login pages, dynamic content etc. Firewalls, SSL and locked-down servers are
    futile against web application hacking. Check your website for vulnerabilities
    to SQL injection, Cross site scripting and other web attacks before hackers do!
    Download Trial at:

    http://www.securityfocus.com/sponsor/pen-test_050831
    -------------------------------------------------------------------------------

  • Next message: Goran Sevic: "Re: Sniffing on a switch"

    Relevant Pages

    • RE: 3rd party vuln assesment firms
      ... > "We use the same tools hackers bring to bear against your systems. ... >> I'm looking for a firm to conduct annual 3rd party vulnerability ... Up to 75% of cyber attacks are launched on shopping ... >> your website for vulnerabilities to SQL injection, ...
      (Pen-Test)
    • RE: 3rd party vuln assesment firms
      ... > "We use the same tools hackers bring to bear against your systems. ... >> I'm looking for a firm to conduct annual 3rd party vulnerability ... Up to 75% of cyber attacks are launched on shopping ... >> your website for vulnerabilities to SQL injection, ...
      (Pen-Test)
    • RE: Penetration test of 1 IP address
      ... Before I do anything very intrusive I personally go to the website ... Also remember once you have found a vulnerability, ... Hackers are concentrating their efforts on attacking applications on ... Up to 75% of cyber attacks are launched on shopping ...
      (Pen-Test)
    • Re: Whitespace in passwords
      ... input password is alphanumeric + special characters -- chances are strong ... >> Hackers are concentrating their efforts on attacking applications on ... Up to 75% of cyber attacks are launched on shopping ... >> your website for vulnerabilities to SQL injection, ...
      (Pen-Test)
    • Re: Qualys
      ... Audit your website security with Acunetix Web Vulnerability Scanner: ... Hackers are concentrating their efforts on attacking applications on ... Up to 75% of cyber attacks are launched on shopping carts, ...
      (Pen-Test)