Re: network sniffing question

From: TheMartian (no_frelling_spam_at_no_spam.spam)
Date: 04/29/03

  • Next message: Martin Cooper: "Re: recommend Linux firewalls for non-profit"
    Date: Tue, 29 Apr 2003 12:18:50 GMT
    
    

    After a long battle with technology Pat wrote:

    > hi guys,
    > we have a switched network. all our comps are on switches and we use
    > telnet to log into our servers as root.
    >
    > my question is,
    >
    > can anyone sniff the packets and get the root password? I think not
    > because 1- I'm on a switched network so you can't sniff what's not yours
    > 2- you must be root to put the ethernet card into sniffer mode (even if
    > you do let's say on win9X) you still can't sniff packets because you're
    > on a switched network.
    >
    > need your comments please.
    > thank you.
     
    do not rely on a switched environment for additional security, there are
    several apps that can sniff using arp posioning

    one example is ettercap
    http://ettercap.sourceforge.net/

    one other one that I found on a clients box, was parasite. there are many
    more

    -- 
    www.ozetechnology.com
    100% Microsoft Free.
    

  • Next message: Martin Cooper: "Re: recommend Linux firewalls for non-profit"

    Relevant Pages

    • Re: Sniffing on switched networks.
      ... If you wanna sniff on a switched network just install Cin n Able and then ... the gateway (router) then used Iris to sniff myself, ...
      (alt.computer.security)
    • Re: Windows Traffic Sniffer
      ... > not passing your computer. ... To be able to sniff on a switched network, ... > you need something to perform arp poisoning as well, which ettercap, ... Or you log on to the switch and mirror the port you want to sniff;-) ...
      (alt.computer.security)
    • Re: network sniffing question
      ... > telnet to log into our servers as root. ... > because 1- I'm on a switched network so you can't sniff what's not yours ... Using unencrypted protocols, like telnet, which send the ...
      (comp.os.linux.security)
    • network sniffing question
      ... to log into our servers as root. ... 1- I'm on a switched network so you can't sniff what's not yours ... do let's say on win9X) you still can't sniff packets because you're on a ...
      (comp.os.linux.security)
    • RE: Sniffing a Switched Network
      ... Subject: Sniffing a Switched Network ... There is a way to sniff on a switched lan use this tool ... basically it spoofs arp addresses and poisons the arp cache ...
      (Security-Basics)