[ale] MicroCenter in Duluth
Christopher Fowler
cfowler at outpostsentinel.com
Fri Jul 25 14:40:58 EDT 2003
So if I have a 1000 hub ports on one port of the netgear, how does
it keep track of each 1000 mac addresses. Does it have that much
memory? I assumed that if it detected a hub and not a PC then it
would bounce all traffic to that hub
On Fri, Jul 25, 2003 at 02:02:52PM -0400, Bruce Griffis wrote:
> On Friday 25 July 2003 01:25 pm, Matt Smith wrote:
> > >I purchased a generic netgear switch and want to sniff.
> > >If I use a crossover cable and fool the switch in
> > >thinking I'm a hub will it send me all the packets?
> >
> > No, a switch uses MAC addresses to direct traffic only to the port that is
> > necessary. Only fancy switches (I.E. NOT the netgear one you have) will
> > create a "mirror" port that copies all of the traffic from every port onto
> > a specific port for sniffing/intrusion detection, etc.
> >
> > What you really needed to buy is a hub. :) Or you can use some of the
> > airsnort suite of tools to hijack the default gateway's mac and trick every
> > machine on the network into sending you it's packets.. But that doesn't
> > help for traffic between machines on the subnet.
> >
> >
> > --Matt
>
> Matt's right - the Netgear Switch you have won't let you sniff all traffic on
> the LAN. If you don't mind popping for a few pennies and are doing this at
> home, you could add a hub to the equation. Connect your router to your hub.
> Connect your PC to the hub. Connect the switch's uplink port to the hub.
> You'll get all inbound and outbound traffic. You won't get PC-to-PC traffic,
> though. For that, all devices would need to be on the hub.
>
> Oh yeah - Ethereal is pretty good, too. I tried it and removed it. Sometimes
> at home you're better off not knowing everything running across the wire.
>
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://www.ale.org/mailman/listinfo/ale
_______________________________________________
Ale mailing list
Ale at ale.org
http://www.ale.org/mailman/listinfo/ale
More information about the Ale
mailing list