Sniffing is possible in a switched ethernet environment. You can use man in the middle techniques like ARP spoofing to sniff in a switched environment. This presentation is an attempt to explain how can somebody sniff in a switched ethernet using ARP spoofing. Dsniff has existed for long as a tool for various sniffing activities. But recently, tools like EttercapNG have made it easier.
This document is in PDF format. To view it click here.
c/o Manu Garg on 27/06/05
