From: Marlen Caemmerer (nosy@c-base.org)
Date: Sat Oct 29 2005 - 04:48:03 EDT
On Thu, 27 Oct 2005, Andy Meyers wrote:
>
> Now i know people say you "cant" sniff on a switch and I know about ARP
> poisoning and MAC flooding. But there has to be another way. I have heard
> too many stories about "he sniffed my AIM conversation on a Cisco switch"
> (an example is in the most recent version of 2600). Does anyone know of any
> technique how to do this? Can you ARP poison a switch?
>
Some of the switches and routers from cisco have a monitor command where
you give a port you want to have a copy of the traffic from and a second
monitor command for the port where you want the copy of the traffic to
appear.
Cheers
nosy
------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner:
Hackers are concentrating their efforts on attacking applications on your
website. Up to 75% of cyber attacks are launched on shopping carts, forms,
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are
futile against web application hacking. Check your website for vulnerabilities
to SQL injection, Cross site scripting and other web attacks before hackers do!
Download Trial at:
http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:55:06 EDT