about sniffer - HeapOverflow Computer Security Community & Forums : Heap Overflow.com

HeapOverflow Computer Security Community & Forums : Heap Overflow.com

		HeapOverflow Computer Security Community & Forums : Heap Overflow.com > Computer Security: Discussions > Applications, Tools & Papers
about sniffer

Mark Forums Read

Notices

Welcome to you visitor! This community is mainly dedicated to the computer and security, if you're looking for DFind scanner or others exploits codes you will find them into the Projects section, feel free to start Blogging and remember to always keep an eye and start talking about security Advisories & public Exploits.

Applications, Tools & Papers Discuss about security applications, tools, papers, etc...

about sniffer

This is a discussion on "about sniffer" within the Applications, Tools & Papers part of the Computer Security: Discussions section; I tested windump and ethereal if I understood their operation well, they intercept the packages entering on my PC but if I want intercetper packages which are not intended to me for example: my ip: 66.66.66.66 i ...

Reply

Page 1 of 2

1

#1 (permalink)

Old

18-07-05

fredo is offline

Junior Member

Join Date: Jun 2005

Posts: 12

Thanks: 0

Thanked 0 Times in 0 Posts

Rep Power: 7

fredo is on a distinguished road

Default

about sniffer

I tested windump and ethereal
if I understood their operation well, they intercept the packages entering on my PC

but if I want intercetper packages which are not intended to me
for example:
my ip: 66.66.66.66
i want sniff 200.200.200.200 port 21
i don't know user and pass to connect me 200.200.200.200 port 21
I do not have any accesses to 200.200.200.200

is it possible to intercept?
thank you for your lights

Reply With Quote

Sponsor

Advertiser

#2 (permalink)

Old

18-07-05

ZoraX

Guest

Posts: n/a

Default

If i understand your question correctly... Its not possible.

Im no expert at sniffing, but I think you have to be on the same Local Area Network as the pc you want to sniff. The information you want to sniff is send out to the hub you are both connected to, packets are send with a destination ip in the header, the hub sends the packet to all the pc's connected to the hub, and the computers read the packet head.

If the packet contains the computers ip, it accepts the packet. The sniffer fakes the given ip adress(200.200.200.200) and also accepts the packet.

If its connected to a switch, you have to use a sniffer that uses APR to sniff.

This flash should explain it:
http://www.oxid.it/downloads/apr-intro.swf

Im no expert so please correct me if i got anything wrong

Reply With Quote

#3 (permalink)

Old

18-07-05

fredo is offline

Junior Member

Join Date: Jun 2005

Posts: 12

Thanks: 0

Thanked 0 Times in 0 Posts

Rep Power: 7

fredo is on a distinguished road

Default

you understood my question well
but I remember the history with a government which intercepted all the e-mails with key words like attack terrorism etc...

and I do not think the government controls all the servers e-mail of the world they must thus intercept some share with a sniffer
It is what makes me think that possible

Reply With Quote

#4 (permalink)

Old

18-07-05

sunburn is offline

Junior Member

Join Date: Jun 2005

Posts: 2

Thanks: 0

Thanked 0 Times in 0 Posts

Rep Power: 5

sunburn is on a distinguished road

Default

maybe you think of echelon? but thats far from beeing a sniffer run on a puter

http://en.wikipedia.org/wiki/ECHELON

Reply With Quote

#5 (permalink)

Old

18-07-05

fredo is offline

Junior Member

Join Date: Jun 2005

Posts: 12

Thanks: 0

Thanked 0 Times in 0 Posts

Rep Power: 7

fredo is on a distinguished road

Default

to intercept Hertzian waves I do not think that it is quite hard
the waves go from everywhere

but for rope drives, it is not the same thing

Reply With Quote

#6 (permalink)

Old

19-07-05

class101 is offline

Administrator

Join Date: May 2005

Location: France

Age: 27

Posts: 592

Blog Entries: 3

Thanks: 18

Thanked 7 Times in 7 Posts

Rep Power: 10

class101 has disabled reputation

Send a message via MSN to class101

Default

"i want sniff 200.200.200.200 port 21" what a request lol, you wanna sniff cocaine so ?

__________________
Security community webmaster
100% Free Directory
100% Cool milw0rm javascript

Reply With Quote

#7 (permalink)

Old

19-07-05

ZoraX

Guest

Posts: n/a

Default

Quote:

Originally Posted by class101

"i want sniff 200.200.200.200 port 21" what a request lol, you wanna sniff cocaine so ?

haha :P

The only way you can sniff a login and pass on 200.200.200.200 is that one of the pcs in your own lan has a user account and password on 200.200.200.200. Then you sniff all his outgoing connections.

Another way is to hack it with any other exploit and get the config file of the ftpd and crack the hashes, or start the sniffer on the hacked pc.

Reply With Quote

#8 (permalink)

Old

19-07-05

fredo is offline

Junior Member

Join Date: Jun 2005

Posts: 12

Thanks: 0

Thanked 0 Times in 0 Posts

Rep Power: 7

fredo is on a distinguished road

Default

thanks ZoraX
It is well what I feared.
But certain people praise themselves to be able to return anywhere.
I wanted to be sure of their lie.

Quote:

i want sniff 200.200.200.200 port 21" what a request lol, you wanna sniff cocaine so ?

I'm plied de rire!!!!

Reply With Quote

#9 (permalink)

Old

26-07-05

hx

hx is offline

Member

Join Date: Jun 2005

Location: Australia

Posts: 37

Thanks: 0

Thanked 2 Times in 2 Posts

Rep Power: 12

hx is on a distinguished road

Default

/me scans cocaino 21 --snort 255.x.x.x\8:21 --daemon

hahaha

damn sometimes i am silly.. ok!

Reply With Quote

#10 (permalink)

Old

22-08-05

lawrence is offline

Junior Member

Join Date: Aug 2005

Posts: 3

Thanks: 0

Thanked 0 Times in 0 Posts

Rep Power: 5

lawrence is on a distinguished road

Default

FYI, Winpcap now offer remote-sniffing capability, you only need to own this box first :P

Reply With Quote

Sponsor

Advertiser

Reply

Page 1 of 2

1

Tags
sniffer

« xpsp2_2k3_heap_exploitation | Time to Patch! »

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is On HTML code is Off Trackbacks are On Pingbacks are On Refbacks are On

heapoverflow.com - SEOmeter SEO tools

Locations of visitors to this page

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47