From the course: Cisco Network Security: Secure Routing and Switching

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

CDP/LLDP reconnaissance

CDP/LLDP reconnaissance

From the course: Cisco Network Security: Secure Routing and Switching

Start my 1-month free trial

CDP/LLDP reconnaissance

- [Instructor] On a network, devices need to find out information about one another. There are two protocols that provide a way for network devices to communicate information about themselves. One is Cisco Discovery Protocol, this is a Cisco proprietary protocol, and Link Layer Discovery Protocol, an IEEE standard that is vendor-neutral. Both protocols serve the same purpose. They enable no discovery for use with management tools such as Simple Network Management Protocol. Both protocols communicate with other devices and share information about the network device. Such as the software version, IP address, platform capabilities, and the native VLAN. Attackers can easily use Wireshark or other networking analyzer software to sniff information about devices that use the discovery protocols that are sent across the network in the form of broadcast messages. Because CDP is unauthenticated, an attacker could craft bogus CDP packets to spoof other Cisco devices, or flood the neighbor table…

Contents