Sniffing Around Hubs

Sniffing on a network that has hubs installed is a dream for any packet analyst. As you learned earlier, traffic sent through a hub is sent to every port connected to that hub. Therefore, to analyze a computer on a hub, all you have to do is plug in a packet sniffer to an empty port on the hub, and you can see all communication to and from all computers connected to that hub. As illustrated in Figure 2-2, your visibility window is limitless when your sniffer is connected to a hub network.

Sniffing on a hub network provides a limitless visibility window.

Figure 2-2. Sniffing on a hub network provides a limitless visibility window.

Note

The visibility window, as shown in various diagrams throughout ...

Get Practical Packet Analysis now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.