Francois Labreque wrote:
> Be sure to put a cross-over cable between the hub and the switch!
> 
> This being said, unless Andrew doesn't care about his job, I wouldn't 
> recommend playing around with the network like that.
> 
> Problem 1:  Both the switch and router are probably set to full duplex. 
>    If the sniffer or hub sends packets, it may cause collisions that 
> would look very suspicious on a full duplex link  (I'm assuming that one 
> of the reasons to go to Cisco hardware 2 years ago was for remote 
> management)
> 
IIRC it is possible to sniff invisibly (not a pun). Somewhere at home I 
have the Snort Cookbook and I'm sure it has a description of how to do 
it. I'll post here if I ever find it amongst the couple of thousand 
books we have at home.

John


-- 
"Eppur si muove" - Galileo Galilei

Post a reply to this message