getting lan traffic
Page 1 of 2 12 LastLast
Results 1 to 10 of 12

Thread: getting lan traffic

  1. #1
    Junior Member AarzaK's Avatar
    Join Date
    Jul 2006
    Location
    Venezuela
    Posts
    29

    getting lan traffic

    Hello,

    I want to know what method is good to see the complete traffic on my lan, I want to see what computer generate more traffic and attack the problem in these computer.

    I download ethereal, but this tools only retreive the traffic on my lan pc card, and I want to know all the lan.

    Exist any tool to do its?

    hope can help me.

    Regards,

    AarzaK
    I Was Sent...
    aarzak_@hotmail.com
    http://aarzak.fadlan.com
    http://www.iitac.org

    Alyssa: Aarzak! Save the world!
    Aarzak: I am the only one who can save this world!
    The Last Battle - Sega(c) Games 1989

  2. #2
    Just a Virtualized Geek MrLinus's Avatar
    Join Date
    Sep 2001
    Location
    Redondo Beach, CA
    Posts
    7,324
    Are you attached to a switch by any chance?

    What version of Ethereal?
    Goodbye, Mittens (1992-2008). My pillow will be cold without your purring beside my head
    Extra! Extra! Get your FREE copy of Insight Newsletter||MsMittens' HomePage

  3. #3
    Junior Member AarzaK's Avatar
    Join Date
    Jul 2006
    Location
    Venezuela
    Posts
    29
    Thanks for your reply!

    I am using Ethereal Version 0.99.0

    "Are you attached to a switch by any chance?"

    good question, I am only openned the software, click "List the available capture interfaces..." and click on capture on my card.
    I Was Sent...
    aarzak_@hotmail.com
    http://aarzak.fadlan.com
    http://www.iitac.org

    Alyssa: Aarzak! Save the world!
    Aarzak: I am the only one who can save this world!
    The Last Battle - Sega(c) Games 1989

  4. #4
    Senior Member Aardpsymon's Avatar
    Join Date
    Feb 2007
    Location
    St Annes (aaaa!)
    Posts
    434
    yes, but what is your card plugged into?

    And make sure promiscuous mode is enabled.
    If the world doesn't stop annoying me I will name my kids ";DROP DATABASE;" and get revenge.

  5. #5
    Junior Member AarzaK's Avatar
    Join Date
    Jul 2006
    Location
    Venezuela
    Posts
    29
    this is my card.

    VIA PCI 10/100Mb Fast Ethernet Adapter (Microsoft's Packet Scheduler) : \Device\NPF_{86D89DC5-F63A-42FD-9D7B-E2B0CCCAE385}

    This is directly to the switch.

    the promiscuos mode is enabled
    I Was Sent...
    aarzak_@hotmail.com
    http://aarzak.fadlan.com
    http://www.iitac.org

    Alyssa: Aarzak! Save the world!
    Aarzak: I am the only one who can save this world!
    The Last Battle - Sega(c) Games 1989

  6. #6
    Just a Virtualized Geek MrLinus's Avatar
    Join Date
    Sep 2001
    Location
    Redondo Beach, CA
    Posts
    7,324
    Quote Originally Posted by AarzaK
    this is my card.

    VIA PCI 10/100Mb Fast Ethernet Adapter (Microsoft's Packet Scheduler) : \Device\NPF_{86D89DC5-F63A-42FD-9D7B-E2B0CCCAE385}

    This is directly to the switch.

    the promiscuos mode is enabled
    Switches prevent you from seeing all traffic. You'd have to mirror the port and/or use a hub instead.
    Goodbye, Mittens (1992-2008). My pillow will be cold without your purring beside my head
    Extra! Extra! Get your FREE copy of Insight Newsletter||MsMittens' HomePage

  7. #7
    Master-Jedi-Pimps0r & Moderator thehorse13's Avatar
    Join Date
    Dec 2002
    Location
    Washington D.C. area
    Posts
    2,884
    Place your sniffer at a network choke point via a spanning port on a switch/router. You'll see more traffic than you'll know what to do with.

    --Th13
    Our scars have the power to remind us that our past was real. -- Hannibal Lecter.
    Talent is God given. Be humble. Fame is man-given. Be grateful. Conceit is self-given. Be careful. -- John Wooden

  8. #8
    Junior Member AarzaK's Avatar
    Join Date
    Jul 2006
    Location
    Venezuela
    Posts
    29
    Work in process, thanks all for your help.

    AarzaK
    I Was Sent...
    aarzak_@hotmail.com
    http://aarzak.fadlan.com
    http://www.iitac.org

    Alyssa: Aarzak! Save the world!
    Aarzak: I am the only one who can save this world!
    The Last Battle - Sega(c) Games 1989

  9. #9
    Senior Member RoadClosed's Avatar
    Join Date
    Jun 2003
    Posts
    3,834
    Bragging time... I have 2 of these:

    http://www.packeteer.com/products/packetshaper/7500.cfm

    Pretty colors:

    //EDIT Looks like I have to get a cup of coffee and go talk to Mr. Flash Video there, since this is an OUTBOUND analysis ...
    Attached Images Attached Images
    Last edited by RoadClosed; March 22nd, 2007 at 04:56 PM.
    West of House
    You are standing in an open field west of a white house, with a boarded front door.
    There is a small mailbox here.

  10. #10
    Junior Member Ranok's Avatar
    Join Date
    Oct 2004
    Posts
    5
    Some switches have a monitor port, it's also temporarily possible to ARP spoof the other computers to pass their traffic through the monitoring station. However, a word of warning, most networking hardware is much faster at routing than a normal desktop, so by doing this, it'll slow down the network. I'd only do it on a small network, that I own, and make sure that all the users know I'm trying to find odd traffic.

    Hopefully this helps,

    n0k

Similar Threads

  1. PIX: Access Control Lists and Content Filtering
    By Nokia in forum The Security Tutorials Forum
    Replies: 0
    Last Post: October 23rd, 2006, 05:58 PM
  2. Using IPSec to Secure Computers and Network Traffic.
    By Tiger Shark in forum The Security Tutorials Forum
    Replies: 0
    Last Post: October 7th, 2004, 08:18 PM
  3. Tcp/ip
    By gore in forum Newbie Security Questions
    Replies: 11
    Last Post: December 29th, 2003, 08:01 AM
  4. HaHaHa Akamaitechnologies Port Scan
    By mathgirl32 in forum IDS & Scanner Discussions
    Replies: 10
    Last Post: February 3rd, 2003, 07:20 PM
  5. The Worlds Longest Thread!
    By Noble Hamlet in forum AntiOnline's General Chit Chat
    Replies: 1100
    Last Post: March 17th, 2002, 09:38 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •