sniffing other subnets with cain??

[metalwarrior]

i am in a college compus and we have many sifferent subnets.... should i be worried about people using Cain to sniff data in ANOTHER subnet???
any other tools i should be awaire of?

[nihil]

There are no tools you should be aware of, other than that there are tools.

Your question seems to be about the security of the various subnets, and the answer to that must lie in how they have been set up and are monitored.

I would suggest that you ask your network administrators, as they will know the details.

[thehorse13]

A sniffer's effectiveness as an enumeration tool depends on where it is placed on the network and how the network itself is architected. If I place it on a subnet where 3 hosts communicate, chances are that it won't be very effective unless you have a set target in mind and it happens to be on that segment.

A sniffer becomes HIGHLY dangerous if placed at the core router or network choke point. Obviously, you will have no way of knowing if this has happened. Leave the network security to the admins of your school network. Worrying will not improve your position nor will knowing about all the tools in the world.

You mentioned cain in your title. Cain offers other tools other than just sniffing. In the wrong hands, it can cause havoc on the network. If you are even considering playing with this tool, get it out of your head. You will end up making yourself very visible to the administrators who I assure you will not find your explorations humorous.
--Th13

[metalwarrior]

ok
so what are the ways of detecting if i am being ARP poisoned?
can i protect myslelf from being poisoned

[thehorse13]

See here:
http://en.wikipedia.org/wiki/ARP_poisoning

and here for detection:
http://www.chrismc.de

--TH13

[metalwarrior]

thank you that was very helpful