[olug] mystifying cable modem problem

[Bill Brush]

olug-bounces at olug.org wrote on 08/30/2004 07:22:19 PM:

>

> Just remember... if you're using a packet sniffer on a different box
> that is not apart of the communications (ie: not on client nor
> host), you have to be running on a 10baseT network.  100baseT
> networks tend to be switched, meaning you won't see every packet
> going across the wires.
>

This is not entirely accurate.

1.  A 10base-T network can be switched also.

2.  A 100base-T network can be run on a hub.

3.  Even if the network is switch you can use a promiscuous port to see
everything (on a managed switch).

4.  On an unmanaged switch you can use certain tools to do Arp poisoning so
your monitoring station can act as the man in the middle.

Bill