Re: Network sniffing on the wire - managed switches

There's probably better ways of doing it now, but it used to be true
that you could flood the switch with MAC addresses, overwhelming the
arp table. This would have the effect of turning the switch into a
hub.

See this link, for one description:

http://www.watchguard.com/infocenter/editorial/135324.asp

On Fri, Dec 26, 2008 at 11:10 AM, Tom Yarrish <tom@xxxxxxxxxxx> wrote:
Hey all,
This may come off as somewhat of a newbie question, but it's one I've been
curious about.

When you are doing any sort of pen testing or sniffing on the wire, how do
you handle a managed switch scenario. If you're connected to a switch on
one port, how can you monitor the traffic on the the other ports if you're
not in a monitor mode? I've never understood how you can sniff traffic
other than the traffic from your machine to a destination.

Thanks ahead of time,
Tom


Relevant Pages

  • RE: ARP issues with dual ethernet link and CE 6.0 R2
    ... Isn't there some way, when you swap from port 1 to port 2 on the switch, to ... internal 10/100 Mbit ethernet MAC) and running Microsoft Windows ... traffic between the two we can see that the device sends an ARP ...
    (microsoft.public.windowsce.platbuilder)
  • Re: ARP issues with dual ethernet link and CE 6.0 R2
    ... Isn't there some way, when you swap from port 1 to port 2 on the switch, to ... internal 10/100 Mbit ethernet MAC) and running Microsoft Windows ... traffic between the two we can see that the device sends an ARP ...
    (microsoft.public.windowsce.platbuilder)
  • Re: Cat 2924
    ... Copyright 1986-2004 by cisco Systems, ... BOX in both H/W and S/W, compared to a C2924-XL Switch... ... FastEthernet0/1 failed front-end loopback test ... to make the port configuration "visible", you need to apply 2 commands ...
    (comp.dcom.sys.cisco)
  • Re: Cat 2924
    ... Copyright 1986-2004 by cisco Systems, ... BOX in both H/W and S/W, compared to a C2924-XL Switch... ... FastEthernet0/1 failed front-end loopback test ... to make the port configuration "visible", you need to apply 2 commands ...
    (comp.dcom.sys.cisco)
  • Gigabit Flexibility with Magnum 6K32T Managed Switch from GarrettCom, Inc.
    ... OF GB THROUGHPUT WITH MAGNUM 6K32T MANAGED SWITCH ... Gigabit port capability to four Gb ports when compared to the ...
    (sci.engr.control)