Shellcoders Programming Uncovered (Uncovered series)
Resources Related to Sniffing
-
Ettercap. This is a powerful sniffer implementing the MiM attack (Fig. 27.8). This freeware utility, the main hacker tool, is available at http://ettercap. sourceforge .net .
-
Arpoison. This utility is intended for sending fictitious ARP packets with fictitious MAC and IP addresses. This is the most reliable tool for overcoming intellectual hubs. Arpoison is a freeware utility supplied with the source code. It can be downloaded from http://arpoison.sourceforge.net .
-
Arpmomtor. This program is intended for tracing ARP requests and responses. It is mainly used by administrators for network monitoring and locating individuals that illegally sniff the network. This freeware utility can be downloaded from http://paginas.terra.com.br/informatica/gleicon/code/ .
-
Remote Arpwatch. This is an automated tool allowing the administrator to detect unauthorized traffic capturing. This utility monitors the integrity of all ARP tables within the network and promptly informs the administrator about suspicious changes. This freeware utility can be downloaded from http://www.raccoon.kiev.ua/projects/remarp .
-
FAQ. This comprehensive FAQ related to sniffers and Ethernet, also covers cable modems and some other communication tools. Available at http://www.robertgraham.com/pubs/sniffing-faq.html .