Ethereal-users: Re: [Ethereal-users] Switched network best approch

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "James V. Fields" <jvfields@xxxxxxx>
Date: Sun, 23 Jan 2005 07:59:08 -0500
APR - ARP Poison Routing - is a means of subverting the normal Layer2 to Layer3 resolution mechanism an trick an ethernet switch into forwarding packets to a receiving machine. The page you quote is part of the documentation for CAIN - which is a pretty cool tool for hackers of both the white and black-hat variety, but which should not be used on a production network.

If you are an authorized network administrator at your site, you can probably access the management functions of your ethernet switch to create a "span" or "mirror" configuration. Note that some switches will allow you to span a large number of ports to a specific monitor port, or even a whole VLAN, but others will only allow you to monitor a single other port at a time.

If you are NOT an authorized network administrator and you need to sniff something to/from a computer that you can't access directly, I'd suggest you speak with a network administrator.

Simone Chemelli wrote:

I need to sniff a whole switched network.

I would like if the just released 0.10.9 version is aware of the APR protocol like http://www.oxid.it/ca25um/topics/sniffer.htm in roder to handle also networks with switches instead of hubs.

Regards,

Simone Chemelli
System integration

Serenissima Informatica S.p.a. Via Croce Rossa 5 - 35129 Padova - Italy
Tel.  +39 049 8291111
Fax  +39 049 8291209

---

CONFIDENTIAL INFORMATION

The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer.


------------------------------------------------------------------------

_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users