http://itknowledgeexchange.techtarget.com/itanswers/need-help-with-packet-sniffing/ Mon, 09 Nov 2009 18:05:25 +0000 http://wordpress.org/?v=2.6.2 http://itknowledgeexchange.techtarget.com/itanswers/need-help-with-packet-sniffing/#comment-58562 KevinBeaver Fri, 12 Dec 2008 17:10:39 +0000 #comment-58562 You'll need to ensure you're network analyzer is using the right network adapter in promiscuous mode like Labnuke99 mentions. You'll also need to plug into a monitor/span/mirror port on your switch in order to see everything on the segment. If you don't have a managed switch, then you could use an Ethernet hub as long as the other host(s) you want to view traffic to/from are also plugged into that hub. As a last resort (I say so because you can crash your switch) you can use [A href="http://www.oxid.it/"]Cain & Abel[/A] to do ARP poisoning and essentially turn your switch into a hub so you can see everything. You can even use Cain for sniffing as well. You’ll need to ensure you’re network analyzer is using the right network adapter in promiscuous mode like Labnuke99 mentions. You’ll also need to plug into a monitor/span/mirror port on your switch in order to see everything on the segment. If you don’t have a managed switch, then you could use an Ethernet hub as long as the other host(s) you want to view traffic to/from are also plugged into that hub. As a last resort (I say so because you can crash your switch) you can use Cain & Abel to do ARP poisoning and essentially turn your switch into a hub so you can see everything. You can even use Cain for sniffing as well.

]]>