views:

407

answers:

5

I have a small network in which there are 2 electronic devices and one desktop connected using a switch. Through the desktop with Ethereal/wireshark installed on it, can I sniff the packets that are being communicated between the 2 electronic devices?

I cannot install ethereal or wireshark on either of the electronic devices, but need to monitor the traffic between the 2 devices from my desktop, which is connected via the same switch.

+1  A: 

You will have to use Cain & Abel or some such. In other words, you need to use ARP poisoning. Dunno if it is illegal. But it should be.

Vulcan Eager
+3  A: 

Yes if your switch support Mirror Option that allow you to duplicate all paquet to a specified port on the switch on wich your computer will snif packet. Otherwise I think it's not possible.

Fox
A: 

Normally, to sniff packets through switch you need to do ARP-poisoning attack (so switch replicates all packets on your sniffing interface). There are tools for such ARP-poisoning attack (Cain & Abel is a great example).

inazaruk
+4  A: 

Change the switch to a good old-fashioned hub, then just sniff the traffic as normal. Of course, that might not be possible for you either, but I thought I'd at least point it out.

unwind
Kevin
@ unwind, Kevin: Explain. Too glad to learn.
Vulcan Eager
A hub doesn't know which traffic goes where, so it just sends the traffic to every PC it controls, and the PC's discard it if it's not for them, unless you're sniffing it. A switch knows, and only send packets where they're supposed to go.
Malfist
+2  A: 

If you have a computer with two ethernet ports, configure it as a bridge, connect the two devices and sniff with wireshark to your hearts content.

lothar
Thanks for the reply. Yes, my computer has 2 ethernet ports. Now my question is how can i change my comptuer to a switch?
coolcake