Ethereal-users: Re: [Ethereal-users] Traffic not expected on a switch port

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Dario Lombardo <dario.lombardo@xxxxxxxxxxxxxxxx>
Date: Mon, 03 Nov 2003 15:37:58 +0100
R. Benjamin Kessler wrote:


There are a couple of reasons a switch will "flood" TCP traffic out -
generally they're not good...

1 - Someone is running dsniff - probably not likely since you’re not seeing
all other traffic on the switch; you'd probably notice the slowdown in
traffic as well.


I don't agree. Dsniff is a sniffer, it sniffs and doesn't do anything to
the switch. Possibly you're speaking of macof or arpspoof (included in
dsniff).





====================================================================
CONFIDENTIALITY NOTICE
This message and its attachments are addressed solely to the persons
above and may contain confidential information. If you have received
the message in error, be informed that any use of the content hereof
is prohibited. Please return it immediately to the sender and delete
the message. Should you have any questions, please contact us by
replying to MailAdmin@xxxxxxxxx. Thank you
====================================================================