Sniffing can be a precursor to an attack. Learn how to defend against sniffing by using IDS, along with programs to detect sniffers such as AntiSniff and arpwatch.
- [Instructor] Sniffing can be a precursor to an attack.…Learn how to defend against sniffing.…Unauthorized sniffing may be considered illegal,…unless it's required as part of employment,…or you're monitoring your own network.…However, knowing this generally doesn't stop a hacker…from sniffing the network.…There are some best practices to defend against sniffing.…Disable any open ports in common areas…to discourage hackers from tapping in…and sniffing network traffic.…Use encryption for email, webpage transaction,…or configuring devices.…
Keep in mind however,…encryption will not protect…broadcast traffic onto the network…for device discovery such as DHCP or ARP.…There are programs that help detect sniffers.…There's AntiSniff software that can monitor a network…to detect if a node is in promiscuous mode.…Arpwatch monitors MAC address and IP address pairings…in the ARP cache to see if there is duplication.…Snort is an intrusion detection system,…and its arpspoof preprocessor can be used…to detect instances of ARP spoofing,…
Author
Updated
1/13/2020Released
9/29/2016Note: The topics in this course will prepare you for key objectives on the Certified Ethical Hacker exam. Find an overview of the certification and the exam handbook at https://www.eccouncil.org/programs/certified-ethical-hacker-ceh/.
- Sniffing network traffic
- Passive vs. active attacks
- Comparing IPv4 to IPv6
- MAC and macof attacks
- Investigating DHCP attacks
- Detecting ARP and DNS spoofing
- Sniffing tools and techniques
Skill Level Beginner
Duration
Views
Related Courses
-
Managing DNS Essential Training
with Sean Colins3h 15m Beginner -
Learning Kali Linux (2016)
with Malcolm Shore2h 31m Beginner
-
Introduction
-
Welcome1m 5s
-
-
1. Sniffing Overview
-
Sniffing network traffic4m 15s
-
The OSI model4m 10s
-
Passive and active attacks4m 34s
-
Tapping into the data stream3m 19s
-
Comparing IPv4 to IPv64m 35s
-
-
2. MAC Attacks
-
macof attack demo1m 51s
-
Spoofing a MAC address2m 47s
-
-
3. DHCP
-
Investigating DHCP4m 20s
-
Depleting the DHCP pool1m 25s
-
-
4. ARP
-
Address Resolution Protocol2m 48s
-
Ettercap for ARP poison3m 8s
-
Detecting ARP spoofing2m 51s
-
-
5. DNS
-
Domain Name Systems3m 28s
-
Caching and forgery2m 12s
-
Poisoning DNS1m 56s
-
-
6. Sniffing Tools and Techniques
-
Capturing images1m 19s
-
Investigating OmniPeek3m 13s
-
Other sniffing tools1m 9s
-
Defending against sniffing1m 53s
-
-
Conclusion
-
Next steps2m
-
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.
CancelTake notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.
Share this video
Embed this video
Video: Defending against sniffing