[plug] Ethereal and network monitoring

Cameron Patrick cameron at patrick.wattle.id.au
Sun May 2 21:38:20 WST 2004


Chris Caston wrote:

| The problem was that I have all switches so the only packets from
| the phone I could get were broadcast.
| 
| Does anyone know where one can still buy a hub these days or know of
| another method of monitoring it?

Try ettercap.  It will attempt to overload the switch with fake MAC
addresses so it turns into a hub.  It should work on most cheap
unmanaged switches; if you have a fancier managed switch that will
only accept certain MAC addresses on certain ports, you should also
have some way of configuring the switch to send all traffic to a
certain port (assuming, of course, that it's your switch!).

Cameron.




More information about the plug mailing list