Hack Security Pro.pdf - Index of

Here, the connection between the router
and machine 3 cannot be sniffed by the rest
of the network.
It is to be noted that the same network architecture could be created not around a Hub but around a
Switch: this is an intelligent hub which saves in a corresponding table the MAC address and the
Ethernet port number of each machine it is connected to. Then, it will not broadcast the emitted
packets but ask its cache to determine on which Ethernet port it must send the packet.
• Network overloading is much less frequent and the network traffic itself is minimized.
• It is in theory no longer possible to sniff transiting connections on the LAN.
Practical Approach : installation of a sniffer
The reference for sniffers remains Ethereal, on both Windows and Linux, which includes a very
performing analysis system of transiting packets. You will find this tool at: http://www.ethereal.com.
You will also have to install WinPCAP library which can enable you to use sniffing on Windows. You
will find this at http://winpcap.polito.it.
Practical Approach: using a sniffer
We will start by doing brute sniffing sessions before we look at the powerful capture options.
1. Click on Capture
2. Click on Start.
The Hackademy DMP -63/209- SYSDREAM