Link to home
Start Free TrialLog in
Avatar of trojan81
trojan81

asked on

Sniffing on the wire

Experts,

suppose I have vlan-10  10.10.10.0/24.  

I have a webserver with IP 10.10.10.50.

An attacker is able to compromise physical security and plug his laptop into vlan10 and get IP address 10.10.10.100.  The attacker then runs wireshark and starts sniffing on that interface.
The attacker has no access to the cisco switch to span traffic to his machine.

Question, given what I stated above is there anyway the attacker can see traffic from anywhere destined to the webserver?  He should only be able to see broadcast and multicast traffic but not unicast.
ASKER CERTIFIED SOLUTION
Avatar of Zephyr ICT
Zephyr ICT
Flag of Belgium image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Avatar of Rich Rumble
Rich Rumble
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of trojan81
trojan81

ASKER

appreciate it folks