LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 12-19-2005, 11:58 AM   #1
branden_burger
Member
 
Registered: Dec 2004
Posts: 66

Rep: Reputation: 15
ntop location


Hello all.

Shouldn't ntop be running on the bridge/router box? Or can it be run on any box on the network I wish to monitor? If the answer is the latter, it means that anyone can analyze network traffic in promiscuous mode!!!

Anxiously awaiting an answer,
branden_burger.
 
Old 12-20-2005, 08:24 AM   #2
nx5000
Senior Member
 
Registered: Sep 2005
Location: Out
Posts: 3,307

Rep: Reputation: 57
Putting an interface in promiscuous mode permits you to read all the packets that are crossing an ethernet (==diffusion network) segment.
An ethernet segment stops at a switch or router frontier.
So, among the same ethernet segment, you can put ntop where you want, the result will be the same everywhere.
There are techniques to bypass switch filtering, have a look at ettercap or macof. The latter may also work on a router: a router can be transform in a hub if it gets overflowed.
If you don't put the interface in promiscuous, then you can see all the traffic which has destination ip=interface ip; so if you put it on a router you should see a lot of things.
Not sure I was very clear
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Ntop cpo Linux - Newbie 4 06-02-2015 02:32 PM
Need help with Ntop Asagath Linux - Security 1 12-02-2005 05:04 PM
Ntop and Routers intranet_man Linux - Networking 3 06-20-2005 02:53 PM
uninstall ntop Karlsonas Linux - Software 1 06-07-2005 03:17 PM
ntop install help garretwp Linux - Networking 2 04-24-2004 03:10 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 12:38 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration