Date: Wed, 21 Jul 1999 00:58:30 -0700 (PDT) From: Vincent Poy <vince@venus.GAIANET.NET> To: Matthew Dillon <dillon@apollo.backplane.com> Cc: Jaye Mathisen <mrcpu@internetcds.com>, Modred <modred@ns1.antisocial.net>, sthaug@nethelp.no, leifn@neland.dk, freebsd-hackers@FreeBSD.ORG Subject: Re: poor ethernet performance? Message-ID: <Pine.BSF.4.05.9907210057130.331-100000@venus.GAIANET.NET> In-Reply-To: <199907210733.AAA25177@apollo.backplane.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 21 Jul 1999, Matthew Dillon wrote: > :Perhaps I'm missing something obvious, but since switches forward packets > :selectively per port, I would think it would be hard to sniff packets on > :any port, w/o administrative access to the switch to tell it to mirror > :data to a different port. > : > :ie, if I'm plugged into port 1, I can't see traffic on a switch on port 2 > :except for broadcast traffic... > > The switch routes traffic based on its ARP cache. While you cannot > easily monitor another port's traffic, you can take over its MAC address > and steal its traffic. No idea, all I know is that people on our LAN without changing MAC addresses can see all traffic going on the LAN. Even from our FreeBSD box with trafshow, we can see traffic that is destined for the global net from the modem dialups. Cheers, Vince - vince@MCESTATE.COM - vince@GAIANET.NET ________ __ ____ Unix Networking Operations - FreeBSD-Real Unix for Free / / / / | / |[__ ] GaiaNet Corporation - M & C Estate / / / / | / | __] ] Beverly Hills, California USA 90210 / / / / / |/ / | __] ] HongKong Stars/Gravis UltraSound Mailing Lists Admin /_/_/_/_/|___/|_|[____] To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.05.9907210057130.331-100000>