However, in a hubbed network, sniffing data is very easy to accomplish by placing a network card into promiscuous mode. The data is typically rejected by all network cards, except the one it was intended for. A passive hub has no mapping, and thus broadcasts line data to every port on the device. This is the main difference between a switch and a passive hub. It actively monitors (cache) the MAC address on each port, which helps it pass data only to its intended target. The reason for this is that the switch regulates the flow of data between its ports. Macof is a member of the Dsniff suit toolset and mainly used to flood the switch on a local network with MAC addresses.
MAC Flooding with MACOF & some major countermeasures
0 kommentar(er)
