Page 1 of 2 12 LastLast
Results 1 to 10 of 20

Thread: MAC spoofing and packet sniffing?

  1. #1

    MAC spoofing and packet sniffing?

    If I use a packet sniffer to watch my network (its how I found that trojan on my other box yesterday) it listens on my ip, meaning I can see whats going on on my laptops connections, but id like to check my other two boxes.

    Just putting the packet sniff on my other two boxes would be the easy option but for some reason the sniffer works with the pcmcia card but not the usb ones :s Also because im just lazy...

    So as a wonder.. If I could spoof my ip and/or mac as the same as my router, could I watch the connections to my other machines aswell? Or even if I could spoof the same ip/mac as the boxes one at a time?
    Did someone piss in the gene pool?

  2. #2
    Just Another Geek
    Join Date
    Jul 2002
    Location
    Rotterdam, Netherlands
    Posts
    3,401
    No need to spoof anything.. Use a hub instead of a switch to connect all your computers and put your NIC in promisquous mode..
    Oliver's Law:
    Experience is something you don't get until just after you need it.

  3. #3
    Its a wireless router

    Can anyone suggest a good packet sniffer that has promisquous mode? Airsnort seems to but it isn't very detailed and there is no filters or anything really...

    Did someone piss in the gene pool?

  4. #4
    AO Ancient: Team Leader
    Join Date
    Oct 2002
    Posts
    5,197
    Ethereal works perfectly well on a wireless network assuming WinPCap can use the wireless card which it usually seems to.
    Don\'t SYN us.... We\'ll SYN you.....
    \"A nation that draws too broad a difference between its scholars and its warriors will have its thinking done by cowards, and its fighting done by fools.\" - Thucydides

  5. #5
    Ethereal works fine



    Thanks
    now to check these other boxes... Im really considering just completley stopping using windows on all of them
    Did someone piss in the gene pool?

  6. #6
    Right turn Clyde Nokia's Avatar
    Join Date
    Aug 2003
    Location
    Button Moon
    Posts
    1,696
    Why?

  7. #7
    Windows does everything by itself but I keep ending up with problems like the one I had there, and spending more time on linux will help me learn
    Did someone piss in the gene pool?

  8. #8
    AO Ancient: Team Leader
    Join Date
    Oct 2002
    Posts
    5,197
    Windows does everything by itself but I keep ending up with problems like the one I had there, and spending more time on linux will help me learn
    Errrr.... Wrong..... It will help you learn a different OS...

    Windows does do everything by itself.... But you do have a remarkable amount of control _if_ you want to have it and want to learn how.....

    What's the difference?
    Don\'t SYN us.... We\'ll SYN you.....
    \"A nation that draws too broad a difference between its scholars and its warriors will have its thinking done by cowards, and its fighting done by fools.\" - Thucydides

  9. #9
    Banned
    Join Date
    Jun 2005
    Posts
    445
    I completely support switching over to Linux, in the interest of knowledge, experience, whatever...


    But Windows is a good OS. And it really deserves a fair chance. Remember, it's still the industry standard... for the most part.

  10. #10
    I agree with Tiger on this one...

    Just remember that to secure your network, you have to know exactly how each OS you're using is communicating so that you can either turn it off, secure it, or watch it for intrusion:

    MS Windows out of the box for example, may have NetBios, NetBEUI, IPX/SPX, and IP all listening to the network and sending out packets that anounce their presence. IP is the most likely candidate for intrusion.

    For UNIX, IP is the lifeblood of UNIX-like OSs, available and intricately tied to almost
    every function of the OS.
    Rather than disabling networking, you'll more likely want to trim any unnecessary services and secure the system as well as you can.

    Pay attention to the networking protocols in use by the Box's OSs and other networking devices you install. You'll want to disable any protocols you don't need and set up the proper monitoring and detection systems for the protocols you leave running.


Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •