SECURING FIBRE CHANNEL FABRICS - Brocade

SAN Security Myth Number 6To demonstrate how easy it is to capture sniffed data and rebuild anentire file, a second experiment, similar to the one in Myth Number 6,was conducted. This time, another feature was exploited - the ability tomirror a port. A simple laptop was used to store the frames capturedby the FC trace analyzer.The storage array port (port 0) was mirrored to port 15 using the portmirroring feature built into the switch, as shown on the screen capturein Figure 5 and the diagram in Figure 6.Figure 4. Port mirroring screen captureSAN Test BApplicationserverPlaintextExcelspreadsheetStorageport (0)Mirroredport (15)LaptopStorageFC traceanalyzerFigure 5. Sniffing FC frames using a mirrored port and storing them ona laptopSecuring Fibre Channel Fabrics 15