Networks

Ask something
Discussion Locked

LAN

0 helpful
1 reply

by smajaz

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

1)A person wishes to sniff the packets going to the outside world from your LAN.
How is he going to check the information passing out of your network without
letting the host or any one in the network know? What if it is a switched LAN or a
broadcast LAN? Give a step by step description of both the scenarios.

2. A user wants to communicate with the bank for its online transactions. The bank
and the user are in two different domains; we can call them as bank.com and
user.com respectively. Both the domains have the DNS services running. The
intruder would like to interrupt their communication and would like the
transactions to be made in his account. How will he do that? Give a step by step
description of the scenario

1 reply

by steve.freke

1. In a switched infrastructre you need to have ports placed in SPAN mode. Otherwise you will only sniff traffic destined for that port.

In a shared environment it is easier as traffic will go up to the broadcast domain boundary. usually a router or l3 switch.

Sniffing today is not as easy as it was 10years ago, becuase of the advent of switches.

2. I don't thinking giving step by step instructions how to do this is in the spirit of this forum. The attack you describe is achievable with the right logging, knowledge and banking that doesn't use Digital certificates.

This discussion is closed to new replies.