Re: IP sniffing (was:Re: Whaaa...?)

From: Mike Lorrey (mlorrey@datamann.com)
Date: Mon Apr 29 2002 - 19:57:41 MDT


3@cox.rr.com>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

Dan Clemmensen wrote:
>
> R. Coyote wrote:
>
> > I wonder how I can put my DSL modem into promiscuous mode
> >
>
> You can't. The modem is decoding a single point-to-point
> connection between itself and the DSLAM at the far end.
> The only traffic on that connection is destined for
> you or originated by you.

Since DSLs are attached to switches rather than just modem banks kluged
together on hubs (how ISP's used to do it), they get only the IP packets
that they are supposed to get, *as a full power signal*. This is not to
say that you couldn't look for ghost packets due to Tempest-type
radiation on the line, but you'd essentially have to just tape the whole
line signal, filter out your own packet traffic, then capture any
digital signals that remain above line noise, boost that amplitude, then
scan that for packet information. So you'd need something more than your
desktop PC and DSL modem alone to do this...

If you look at the internet as a universe of radiation, all of the
packets that switches prevent from passing anywhere on the net
generates noise. These result in a sort of Cosmic Internet Background
Radiation level. The local switch, though, acts like a membrane, letting
properly coded spacecraft through. However, if you ding the membrane and
don't get through, you will create an echo which will be stronger than
the echos generated at successively more distant switches.



This archive was generated by hypermail 2.1.5 : Sat Nov 02 2002 - 09:13:42 MST