Some (most?) Ethernet switches can be configured to set a "monitor
port", where all the traffic for all the other ports are forwarded to
the monitoring port.

Even if your switch hasn't this capability, you can do an ARP table
attack, where you first send lots of fake ARP packets with different MAC
addresses until the switch routing table overflows, then the switch
stops routing and start acting as a simple Ethernet hub, forwarding all
the packets to all the ports.


Best  regards,

Isaac


Em 12/3/2010 11:56, Justin Richards escreveu:
>> so for monitoring a hub is used rather than a switch.  i wonder if hubs =
are
>> still available.
>>
>> Be aware that a passive device on a modern ethernet will probably
>> receive ONLY the broadcast (and maybe multicast) packets from the
>> "backbone."  Since the ethernet fabric tends to be switched, the
>> packets that show up at a 10baseT connector are frequently only the
>> packets that "need" to be received by that device.
>>
>> BillW
>>
>>     =

__________________________________________________
Fa=E7a liga=E7=F5es para outros computadores com o novo Yahoo! Messenger =

http://br.beta.messenger.yahoo.com/ =


-- =

http://www.piclist.com PIC/SX FAQ & list archive
View/change your membership options at
http://mailman.mit.edu/mailman/listinfo/piclist