Ethereal-users: Re: [Ethereal-users] Switched network best approch

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Tom Greaser" <tgreaser@xxxxxxxxxxx>
Date: Sun, 23 Jan 2005 08:38:10 -0500
U could use something like dsniff.. it allows you to do
arp spoofing and such..
Dario is correct.. this could cause strange things to happen if utilization is
to much for your host to keep up with.. 
But (always a but)  it is good to know these kind of tricks if you are in a tight spot.. 

>>> Dario Ciccarone <dciccaro@xxxxxxxxxxxx> 1/22/2005 7:33:25 PM >>>
Simone:
 
what is 'a whole switched network' ? Does that mean to connect ethereal to a switch port & sniff traffic from another switch? if that is so, you will need something like Cisco's RSPAN
 
with regards to APR: APR is not a protocol, but a trick - an interesting & cunning trick, but which shouldn't be used as 'the' method to sniff on a switch - it can produce unpredictable results on end hosts, overload the machine doing the sniffing, and cause network outages.
 
Try to use the standard procedure to sniff on a switch (monitoring traffic to a monitor port). Only if your switch does NOT support this feature I would use something like APR - which is not supported on ethereal
 
Dario

Simone Chemelli <Simone.Chemelli@xxxxxxxxx> wrote:

I need to sniff a whole switched network. 

I would like if the just released 0.10.9 version is aware of the APR protocol like http://www.oxid.it/ca25um/topics/sniffer.htm in roder to handle also networks with switches instead of hubs. 

Regards, 

Simone Chemelli
System integration

Serenissima Informatica S.p.a.                
Via Croce Rossa 5 - 35129 Padova - Italy
Tel.  +39 049 8291111
Fax  +39 049 8291209

---


CONFIDENTIAL INFORMATION


The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer.
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx 
http://www.ethereal.com/mailman/listinfo/ethereal-users 

		
---------------------------------
 250MB gratis, Antivirus y Antispam
 Correo Yahoo!, el mejor correo web del mundo
 Abrí tu cuenta aquí