Sniffing is the process of intercepting network traffic by turning the network interface card (NIC) to promiscuous mode, in order to be able to sniff the transmitted data. There are two types of network sniffing – active and passive sniffing:
- Passive sniffing: This occurs at hub devices or switches without injecting any additional packets.
- Active sniffing: This is done by injecting Address Resolution Protocol (ARP) packets into the network. The following are some active network sniffing attacks:
- MAC flooding—this is the process of flooding the CAM table with random data until it is full
- Switch port stealing
These two previous attacks could be avoided by allowing only one MAC address on the switch port and implementing ...
