RE: Small hardware network sniffer - does it exist?

From: Clemens, Dan (Dan.Clemens@healthsouth.com)
Date: Thu Nov 02 2006 - 15:34:24 EST


Check out http://www.soekris.com/products.htm

You could then grab the source for m0n0wall and place your own utilities
on the box, while bridging etc. You could even do power over ethernet on
the box or put a few wifi cards in the soekris box.

-Daniel

-----Original Message-----
From: listbounce@securityfocus.com [mailto:listbounce@securityfocus.com]
On Behalf Of Petr.Kazil@eap.nl
Sent: Thursday, November 02, 2006 6:32 AM
To: PenTest
Subject: Small hardware network sniffer - does it exist?


I have ordered a few hardware keyloggers to play with
(http://www.keelog.com/) and I was wondering if the same idea exists for
networks?
A device that you could tape under a desk, and that would act as a
transparant bridge, sniffing all traffic.

I know that you can use arp-spoofing to get a similar result (easier,
better?), and I know about hardware network taps.
But I'm still interested in the theoretical possibilities of this idea.

I have a few old laptops, but these have just one PCMCIA network card,
so bridging is not possible (well, with the right kind of network cards
you can get two in that slot - I'll see if you can still buy them). But
laptops are too big and heavy.

I've looked at microcontrollers with ethernet adapters, but here I find
webserver appliances with just one network interface. They're small but
I'm not sure if you could run an OS and a sniffer on them. I've looked
at miniboards but they are very expensive, too expensive for "just a
toy".

But, considering that you can get a 2-cigarette-pack sized Pix-firewall,
such hardware must exist. But I haven't found the right keywords yet.
Any ideas?

Greetings, Petr Kazil


------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=7016
00000008bOW
------------------------------------------------------------------------


-----------------------------------------
Confidentiality Notice: This e-mail communication and any
attachments may contain confidential and privileged information for
the use of the designated recipients named above. If you are not
the intended recipient, you are hereby notified that you have
received this communication in error and that any review,
disclosure, dissemination, distribution or copying of it or its
contents is prohibited. If you have received this communication in
error, please notify me immediately by replying to this message and
deleting it from your computer. Thank you.

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:57:16 EDT