Why I run Linux...

[X11]

Because I am in control.

[worker201]

Because the really powerful high-end command-line-based scientific applications are all open source. Microsoft and Apple don't get NSF grants.

[X11]

Because I can do really cool oops with cryptoloop and other nifty oops like that.

[Void Main]

"driftnet" is one if the coolest little tidbits I've run across in a while.

# apt-get install driftnet

[X11]

I totally have to get that after googleing it.

[Tux]

Yeh driftnet is neat, it's a shame switches spoil the fun

[Void Main]

Yeh driftnet is neat, it's a shame switches spoil the fun :)

That's why you set up a span/rspan strategically in front of the proxies/firewalls. ;)

[X11]

Yeh driftnet is neat, it's a shame switches spoil the fun

That's why you set up a span/rspan strategically in front of the proxies/firewalls.

expand on this...

[Void Main]

This orta cover it:
http://www.cisco.com/en/US/products/hw/ ... 7f323.html

Basically you need a high end switch capable of doing spanning (or port mirroring is another term). If you do not have such a switch then you can not sniff traffic on one or more ports on your switch. You'll either have to get such a high end switch or go the other way and get a dumb hub.

[X11]

Is there a way to set up somthing like that with my firewall (Fedora Core 1)

[Void Main]

Setup something like what? A firewall is not a switch, but you don't even have to concern yourself with that in your setup. Just run driftnet on your firewall if you want to watch the images flying through it. The key is to be able to get the choke point between the inside and the outside. Your Linux firewall *is* the choke point.

[X11]

Yea I got it installed there now...

Im seeing to much advertising.

[Jenda]

I like to be Free!!!