APR - ARP Poison Routing - is a means of subverting the normal Layer2 to
Layer3 resolution mechanism an trick an ethernet switch into forwarding
packets to a receiving machine. The page you quote is part of the
documentation for CAIN - which is a pretty cool tool for hackers of both
the white and black-hat variety, but which should not be used on a
production network.
If you are an authorized network administrator at your site, you can
probably access the management functions of your ethernet switch to
create a "span" or "mirror" configuration. Note that some switches will
allow you to span a large number of ports to a specific monitor port, or
even a whole VLAN, but others will only allow you to monitor a single
other port at a time.
If you are NOT an authorized network administrator and you need to sniff
something to/from a computer that you can't access directly, I'd suggest
you speak with a network administrator.
Simone Chemelli wrote:
I need to sniff a whole switched network.
I would like if the just released 0.10.9 version is aware of the APR
protocol like http://www.oxid.it/ca25um/topics/sniffer.htm in roder to
handle also networks with switches instead of hubs.
Regards,
Simone Chemelli
System integration
Serenissima Informatica S.p.a.
Via Croce Rossa 5 - 35129 Padova - Italy
Tel. +39 049 8291111
Fax +39 049 8291209
---
CONFIDENTIAL INFORMATION
The information transmitted is intended only for the person or entity to
which it is addressed and may contain confidential and/or privileged
material. Any review, retransmission, dissemination or other use of, or
taking of any action in reliance upon, this information by persons or
entities other than the intended recipient is prohibited. If you
received this in error, please contact the sender and delete the
material from any computer.
------------------------------------------------------------------------
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users