For the purposes of this lab, select the
VMware network card and press Enter.
560 Practical Hacking Techniques and Countermeasures
Ettercap will begin by sending out ARP requests based on the subnet mask in
use. In this example, the subnet mask is a Class B so 65,535 possible IP addresses
are available for use; 65,535 ARP requests are sent out looking for a response.
Once Ettercap determines how many computers have responded to the
ARP requests, it will try to retrieve the hostname for each computer.
Wireless 561
Ettercap will then display a list of computers located. There are two identical
columns listed. This allows you to select one source and one destination
computer from each list, respectively.
In this example, the Linux machine (172.16.1.58) was selected as the
source computer by highlighting the IP address and pressing Enter.
562 Practical Hacking Techniques and Countermeasures
The Windows 2000 server machine (172.16.1.60) was selected as the destination
computer by highlighting the IP address and pressing Enter.
By pressing the H key at any time, the Help screen will be displayed. In
this case, the Help screen tells you that pressing the A key will start the ARP
poisoning feature of Ettercap. Press the H key again to remove the Help screen.
Press the A key to start Ettercap ARP poisoning.
Wireless 563
Ettercap will now see all the traffic between these two computers, even
though these computers are communicating via a switch as identified by
Ettercap in the lower right portion of the application with the word SWITCH.
Pages:
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195