Buy or Renew
Buy or Renew
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
258
Views
0
Helpful
3
Replies

Sniffing on 2950 series?

Ricardocs
Level 1
Level 1

‎03-02-2006 03:53 AM - edited ‎03-09-2019 02:07 PM

Hi,

Could anyone tell me if is possible, on a 2950 with default configuration, after flooding it with false arp entries, sniffing all traffic?.

Is it supposed the switch to act as a hub when the mac-address-table is saturated?

Do lower series have the same behaviour?

Thank you.

Labels:
0 Helpful
3 Replies 3

attrgautam
Level 5
Level 5

‎03-02-2006 03:59 AM

AFAIK it is true of all switches. When the CAM table is filled, they broadcast on all ports hence can be used for sniffing. THis is known as mac flooding. U can restrict using Broadcast/Unicast control on Switches . Hence Switch becomes a hub

http://en.wikipedia.org/wiki/MAC_flooding

http://www.watchguard.com/infocenter/editorial/135324.asp

0 Helpful

Ricardocs
Level 1
Level 1
In response to attrgautam

‎03-02-2006 07:57 AM

Thank you for your answer. We agree about the theory, but, could answer anyone who tried it already?

0 Helpful

Ricardocs
Level 1
Level 1
In response to attrgautam

‎03-02-2006 07:58 AM

Thank you for your answer. We agree about the theory, but, could answer anyone who tried it already?

0 Helpful
Customers Also Viewed These Support Documents