Some larger networks are “switched” — meaning they use a network switch to forward specific dataonlyto the designated device, rather than to all network devices. Sniffing on a switched network requires additional protocols to ensure the packet sniffer can be monitored. There are two main types...
Unexplained processes:Many sniffers run on a computer’s user level, meaning that the computer’s user accounts (like you) will be able to see them working. Sudden reduction in storage:Some sniffers can hide themselves with arootkit. But even these super-stealthy sniffers need to put their da...
I keep meaning to fire up ARP poison routing on my cable Internet connection, after I ran tcpdump (for troubleshooting purposes) and noticed my fellow residents’ computers ARPing for the gateway’s MAC address. The only thing keeping me from doing serious damage, er, “research”, is the ...
Unexplained processes:Many sniffers run on a computer’s user level, meaning that the computer’s user accounts (like you) will be able to see them working. Sudden reduction in storage:Some sniffers can hide themselves with arootkit. But even these super-stealthy sniffers need to put their da...
Some larger networks are “switched” — meaning they use a network switch to forward specific dataonlyto the designated device, rather than to all network devices. Sniffing on a switched network requires additional protocols to ensure the packet sniffer can be monitored. ...