This is done with the syntax of:
./sniffit ??“s 172.16.1.45 ??“x ??“a ??“F eth0 > sniffit.log
This will save all output into a log file named sniffit.log.
*Note: Notice when you hit the Enter key the cursor will not drop to a new line
until you stop the application.
The identical FTP connection is made as above.
Sniffing Traffic 257
To stop the Sniffit application hold down the Ctrl key and press the C key.
To read the sniffit.log file, type:
cat sniffit.log |more
258 Practical Hacking Techniques and Countermeasures
The contents of the file will be displayed one page at a time. By pressing
the spacebar you can scroll through the file page by page.
By scrolling through the file, the plain-text username of hacker is shown.
Sniffing Traffic 259
By continuing to scroll through the file, the plain-text password of zerocool
is displayed.
*Note: Keep in mind that the traffic you see is completely dependent upon the
environment the computer ???sniffing??? resides in. For example, if the network
link you are using is connected to a network hub, you will be able to see all
traffic going through that hub to all other computers on that hub. If, however,
the network link you are using is connected to a switch, you will only be
able to see traffic specifically destined to your connection. There is a way to
???sniff??? traffic on a switch to show all traffic to a specific or every computer
on a switch, which will be covered in Chapter 9.
Pages:
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117