Session Hijacking

Sniffers

• Passive sniffing is performed when the user is on a hub. Because the user is on a hub, all traffic is sent to all ports.
• Server versions of Windows cannot be upgraded to Windows XP Professional.
• MAC flooding and ARP poisoning are the two ways that the attacker can attempt to overcome the switch.
• MAC flooding is the act of attempting to overload the switches content addressable memory (CAM) table.
• ARP poisoning is the second method that can be used to overcome switches.
• ARP is how network devices associate a specific MAC addresses with IP addresses so that devices on the local network can find each other.
• The ARP cache stores the IP address, the MAC address, and a timer for each entry.