ARP in action

In example below we send a ping from host A to host B. Host A doesn’t have an ARP entry for host B. Host B doesn’t have an ARP entry for host A. Step 1. Host A sends an ARP request for host B. Step 2: Host B stores the MAC – and IP address […]

Read More →
Passive Ethernet Tap

Just use an ordinary UTP cable Connect 4 walloutlets to the cable as shown below. Use the straight-through cable if you tap an ordinary switched network Use the cross-over cable if you tap an PC directly connected to another network The results may looks lik this   Place you tap (8 wired walloutlets) between a […]

Read More →
Capture ethernet and wifi traffic

How to capture ethernet and 802.11 traffiic at once. Use a linux OS PC with wlan interface In a terminal use the following commands: sudo iw dev wlan0 interface add mon0 type monitor sudo ifconfig mon0 up   Start wireshark and select wlan0 and mon0 to capture traffic If needed you can add a capture […]

Read More →
Packet Capture Cisco Router

configure an ACL with the adresses/subnets you want to capture i.e. ip access-list extended BUF-FILTER permit ip host <HOST-1> host <HOST-2> permit ip host <HOST-2> host <HOST-1> Create a buffer with total size and packetsize monitor capture buffer BUFFER size 2048 max-size 1518 linear Associate ACL with BUFFER monitor capture buffer BUFFER filter access-list BUF-FILTER […]

Read More →