EVERYTHING YOU NEED TO KNOW ABOUT SNIFFING – PART 1
TOPICS - What is a sniffer in hacking? - Network Sniffing - How do WIFI sniffers work? - Types of Sniffing - What are the types of sniffing techniques?
What is a sniffer in hacking? This section describes network sniffing and threats, how a sniffer works, active and passive sniffing, how an attacker hacks a network using sniffers, protocols susceptible to sniffing, sniffing within the data link layer of the OSI model, hardware protocol analyzers, SPAN ports, wiretapping, and lawful interception.
Network Sniffing Packet sniffing may be a process of monitoring and capturing all data packets passing through a given network sniffer by using a software application or a hardware device, Sniffing is simple in hub-based networks, because the traffic on a segment passes through all the hosts related to that segment. However, most networks today work on switches. A switch is a complicated computer networking device.
How do WIFI sniffers work? The most common way of networking computers is through an Ethernet. A computer connected to an area network (LAN) has two addresses: a MAC Address and an internet Protocol (IP) Address. A MAC address uniquely identifies each node during a network and is stored on the NIC itself. The Ethernet protocol uses the MAC address to transfer data to and from a system while building data frames.
There are two basic sorts of Ethernet environments, and sniffers work differently in each. the two sorts of Ethernet environments are:
1. Shared Ethernet 2. Switched Ethernet 3. ARP Spoofing 4. MAC Flooding
THE TWO TYPES AREPASSIVE SNIFFINGACTIVE SNIFFING
1) Passive Sniffing Passive sniffing involves sending no packets. It just captures and monitors the packets flowing within the network. A packet sniffer alone isn’t preferred for an attack because this works only during a common collision domain, a standard collision domain is that the sector of the network that’s not switched or bridged (i.e., connected through a hub). Common collision domains are present in hub environments.
2) Active Sniffing Active sniffing searches for traffic on a switched LAN by actively injecting traffic into the LAN. Active sniffing also refers to sniffing through a switch. In active sniffing, the switched Ethernet doesn’t transmit information to all or any the systems connected through LAN because it does during a hub-based network. For this reason, a passive sniffer is unable to sniff data on a switched network.
What are the types of sniffing techniques?
The following is that the list of various active sniffing techniques: 1) MAC flooding 2) DNS poisoning 3) ARP poisoning 4) DHCP attack 5) switch port stealing 6) Spoofing attack
THANK YOU VISIT : www.info-savvy.com