Need a sniffer/password capture to prove telnet is bad

[Frank Pineau]

On Tue, 2004-11-23 at 15:06 -0500, Alex Evonosky wrote:
> Matthew Miller wrote:
> 
> >>Ethereal can capture that just fine in promisc mode...
> > 
> > 
> > But, if it's a switched network, you'll need to actually be somewhere in the
> > path his packets are travelling. 
> > 
> 
> not unless you have access to the switch and issue a spanning-tree 
> session.. Then you can monitor ANY port on that switch.


If you can't port-mirror (span tree, SNAP, etc), simply putting a hub
inline (say, off the inside interface of your firewall...) and plugging
your sniffer into that hub would work nicely.

-- 
Be big.  Be meaty.  Be Frank.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20041123/4fe59258/attachment-0001.sig>