RE: Sniffing A VPN Router

["Mohamad Mneimneh" <mmneimneh () comium com>]

Hi,

This span feature is found on the switch. Just mirror the switch port
connected to the router to another port, and connect your machine to the
latter. If you are using VLANs, make sure your mirror them all.
I would recommend you try EEye's Iris as an alternative to Ethereal.
It's very flexible & powerful.

Hope this helps,

-Mohamad.

-----Original Message-----
From: Jason T. Hallahan [mailto:jthallah () gmail com] 
Sent: Friday, May 05, 2006 10:33 PM
To: security-basics () securityfocus com
Subject: Sniffing A VPN Router

Hello and good day,

I have a Linksys RV016 VPN Router which I am trying to sniff. I would
like to see all of the traffic using Ethereal (or a similar program),
but right now I can only see Broadcast and Multicast traffic, as well
as Unicast to and from my local machine. I have tried plugging into
the uplink port which I hear sometimes works, but does not in this
case. Also, this router has no options to mirror or span ports, which
I guess would have been another solution. Other than replacing this
router with a hub (possible since it is for a dedicated LAN, i.e. no
WAN connection), is there a way for me to sniff all traffic directed
over all ports of this router? Is there a way I can do it with VLANs?
Is there a tool better than Ethereal or one designed for this purpose?

Thank you for your time!

- Jason
***********************************************************************************************************************************
No employee or agent is authorized to conclude any binding agreement on behalf of Comium with another party by e-mail 
without expressed written confirmation by an officer of Comium. Any views expressed by an individual in this electronic 
message do not necessarily reflect views of Comium or its subsidiaries and associates.
This electronic message and its attachments are solely addressed to the addressee's, and contain confidential 
information protected from disclosure belonging to Comium.
If you are not the intended addressee of this electronic message and its attachments, kindly delete it immediately from 
your system and notify the sender by electronic mail. You must not copy this message or attachment or disclose its 
content to any other person.
Comium does not guarantee the integrity of this electronic message and any of its attachments, or that they are free 
from computer viruses or other defects.
************************************************************************************************************************************