You're correct; I was speaking in a "generic" sense of the "DSniff suite."
As you pointed out, macof would be the specific tool that would cause this
type of behavior.
~~~~~~~~~~
R. Benjamin Kessler
Network Engineer
CCIE #8762, CISSP, CCSE
Kessler Consulting
Email: ben@xxxxxxxxxxxxxxxxxxxxx
http://www.kesslerconsulting.com
Phone: 260-625-3273
-----Original Message-----
From: ethereal-users-bounces@xxxxxxxxxxxx
[mailto:ethereal-users-bounces@xxxxxxxxxxxx] On Behalf Of Dario Lombardo
Sent: Monday, November 03, 2003 9:38 AM
To: ethereal-users@xxxxxxxxxxxx
Subject: Re: [Ethereal-users] Traffic not expected on a switch port
R. Benjamin Kessler wrote:
>There are a couple of reasons a switch will "flood" TCP traffic out -
>generally they're not good...
>
>1 - Someone is running dsniff - probably not likely since you're not seeing
>all other traffic on the switch; you'd probably notice the slowdown in
>traffic as well.
>
>
>
I don't agree. Dsniff is a sniffer, it sniffs and doesn't do anything to
the switch. Possibly you're speaking of macof or arpspoof (included in
dsniff).
====================================================================
CONFIDENTIALITY NOTICE
This message and its attachments are addressed solely to the persons
above and may contain confidential information. If you have received
the message in error, be informed that any use of the content hereof
is prohibited. Please return it immediately to the sender and delete
the message. Should you have any questions, please contact us by
replying to MailAdmin@xxxxxxxxx. Thank you
====================================================================
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users