i am in switched network. i want to set a sniffer to a switch/router?..i am using wireshark. but problem with selecting the interface. i know the router is Allied Telesis but i am cant select the right interface. is there any way to know the proper interface to sniff data?
thanks
sniff data from switch/router
You can't sniff data that goes to other machines (only if it comes from your computer *duh*) in a switched network.
You would have to be the "man in the middle" for that.
You can still sniff data going to your computer and leaving it by choosing the right interface. Normally people only have one NIC connected to choose the one you use for your Internet connection.
You would have to be the "man in the middle" for that.
You can still sniff data going to your computer and leaving it by choosing the right interface. Normally people only have one NIC connected to choose the one you use for your Internet connection.
"The best place to hide a tree, is in a forest"
And thus, there was the MITM attack.cats wrote:You can't sniff data that goes to other machines (only if it comes from your computer *duh*) in a switched network.
You would have to be the "man in the middle" for that.
You can still sniff data going to your computer and leaving it by choosing the right interface. Normally people only have one NIC connected to choose the one you use for your Internet connection.
You're going to have to use ARP spoofing to make the other computer/s on the network think you're the router, and the router think that you're the other computers.shan75 wrote:i am in switched network. i want to set a sniffer to a switch/router?..i am using wireshark. but problem with selecting the interface. i know the router is Allied Telesis but i am cant select the right interface. is there any way to know the proper interface to sniff data?
thanks
So instead of data going like this: other computer -> router -> internet, it will go like this:
other computer -> router -> you -> router -> internet
internet -> router -> you -> router -> other computer
Ettercap is a good tool for this, even though it hasn't been updated for a while.