Re: PPPoE sniffing

derk dork wrote:


*/LordDoskias <lorddoskias@xxxxxxxxx>/* wrote:

dork_4love@xxxxxxxxx wrote:
> Greetings,
>
> I am working in cooperate with friend running an ISP ,my friend
>
> installed PPPoE ,by that he says that it will be immune to
packet sniffing
>
> -My question:
>
> --Is it possible to run the usual arp spoofing ,sniffing,ssl mitm on
>
> PPPoE installed networks?
>
> --And if that feasible does ettercap is capable of doing such
duty? or
>
> there are other tools to test that?
>
>
> Regards,
>
> Bernard
>
>
------------------------------------------------------------------------
> This list is sponsored by: Cenzic
>
> Need to secure your web apps NOW?
> Cenzic finds more, "real" vulnerabilities fast.
> Click to try it, buy it or download a solution FREE today!
>
> http://www.cenzic.com/downloads
>
------------------------------------------------------------------------
>
>
>
There is no problem sniffing the pppoe packets if you arp poison the
network - the thing is whether your friend uses CHAP/PAP or something
else for encrypting the passwords between the peer and the
concentrator

He is using CHAP.
The other question if someone managed to get certain password can he sniff certain tunnel b/t the two peers.
Thanx inforward,
Regards,
Bernard

------------------------------------------------------------------------
Never miss a thing. Make Yahoo your homepage. <http://us.rd.yahoo.com/evt=51438/*http://www.yahoo.com/r/hs>
Well, with CHAP if you sniff the whole challenge you could run a bruteforce program to try and crack the password. And also - if you don't use encryption for the tunnel e.g. MPPE if you do an ARP attack you could sniff the pppoe frames and see the traffic in it. I'm not sure about it, though. But common logic suggests that.

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------

Relevant Pages

  • Re: PPPoE sniffing
    ... I am working in cooperate with friend running an ISP,my friend ... installed PPPoE,by that he says that it will be immune to packet sniffing ... PPPoE installed networks? ...
    (Pen-Test)
  • Re: sniffing on dsl cable..
    ... > I have some problems to sniff traffic over a dsl cable. ... > I have the following lan configuration: ... > I use PPPoE protocol and I have the pc that make sniffing with 2 NICs ... without using an ethernet IP). ...
    (comp.os.linux.networking)