Re: ARP Poison - Sniffing Uplinked Switch

Hi
Yes u can do it.nothing more needed.

On 24 Oct 2007 09:41:42 -0000, elluk@xxxxxxxxxx <elluk@xxxxxxxxxx> wrote:
Hi,


I have constructed a test environment to prove concept of sniffing a switched network via arp poisoning. This works a treat.


However, I am interested to know if there is a way to poison the mac address table of a sencond switch that is uplinked to my first, (With the aim of intercepting traffic from another box on that secondary switch).


Could this be done?


Regards,


EL



--
advertise on secgeeks?
http://secgeeks.com/Advertising_on_Secgeeks.com
http://newskicks.com

Relevant Pages

  • RE: Sniffing a Switched Network
    ... Subject: Sniffing a Switched Network ... And Cabletron/Enterasys calls it "Port Redirect". ... and your mail server is in port 12 on your switch. ...
    (Security-Basics)
  • RE: Sniffing a Switched Network
    ... Subject: Sniffing a Switched Network ... The best way to sniff a network on a switch is to span the port you want to ...
    (Security-Basics)
  • RE: Sniffing a Switched Network
    ... Subject: Sniffing a Switched Network ... Well, because of the way switches work, only traffic bound to/from the port ... which echoes everything to every port, whereas a switch keeps a MAC address ...
    (Security-Basics)
  • Re: Sniffing a Switched Network
    ... Subject: Sniffing a Switched Network ... If you have administrator rights on a switch you ... is an arp spoofing attack which, using spoofed arp packets, makes all ...
    (Security-Basics)
  • Re: Sniffing a Switched Network
    ... Subject: Sniffing a Switched Network ... switch unless you have a mirror/monitor port (called a SPAN, ...
    (Security-Basics)