Cisco Ethernet switch Manuale Utente Pagina 18
- Pagina / 84
- Indice
- SEGNALIBRI
Valutato. / 5. Basato su recensioni clienti
181818
© 2002, Cisco Systems, Inc. All rights reserved.
l2-security-bh.ppt
CAM Table Full!
¥ Dsniff (macof) can generate 155,000 MAC entries on a
switch per minute
¥ Assuming a perfect hash function, the CAM table will be
completely filled after 131,052 (approx. 16,000 x 8) entries
Since hash isnÕt perfect it actually takes 70 seconds to fill the
CAM table
¥ Once table is full, traffic without a CAM entry floods on the
local VLAN, but NOT existing traffic with an existing CAM
entry
¥ This attack will also fill CAM tables of adjacent switches
CAT6506 (enable) sho cam count dynamic
Total Matching CAM Entries = 131052
10.1.1.22 -> (broadcast) ARP C Who is 10.1.1.1, 10.1.1.1 ?
10.1.1.22 -> (broadcast) ARP C Who is 10.1.1.19, 10.1.1.19 ?
10.1.1.26 -> 10.1.1.25 ICMP Echo request (ID: 256 Sequence number: 7424) ßß
ßß
OOPS
10.1.1.25 -> 10.1.1.26 ICMP Echo reply (ID: 256 Sequence number: 7424) ßß
ßß
OOPS
Snoop output on non-SPAN port 10.1.1.50
Snoop output on non-SPAN port 10.1.1.50
- Hacking Layer 2: Fun with 1
- Ethernet Switches 1
- ¥ Layer 2 Attack Landscape 2
- ¥ Summary and Case Study 2
- The Domino Effect 5
- The Numbers from CSI/FBI 7
- MAC Attacks 8
- MAC Address/CAM Table Review 9
- Normal CAM Behaviour 1/3 10
- Normal CAM Behaviour 2/3 11
- Normal CAM Behaviour 3/3 12
- CAM Overflow 1/3 13
- CAM Overflow 2/3 14
- CAM Overflow 3/3 15
- Catalyst CAM Tables 16
- CAM Table Full! 18
- ¥ Port Security 19
- Port Security Details 20
- VLAN ÒHoppingÓ Attacks 21
- Trunk Port Refresher 22
- 0100.0ccc.cccc 24
- Dynamic Trunk Protocol (DTP) 25
- Basic VLAN Hopping Attack 26
- Hopping Attack 27
- Outer Tag, Attacker VLAN 28
- Inner Tag, Victim VLAN 28
- Disabling Auto-Trunking 29
- Security Best Practices 30
- ARP Attacks 31
- ARP Refresher 32
- Gratuitous ARP 33
- Misuse of Gratuitous ARP 34
- A Test in the Lab 35
- ¥ ARP spoofing 36
- ¥ MAC flooding 36
- ¥ Selective sniffing 36
- ¥ SSH/SSL interception 36
- Arpspoof in Action 37
- More on Arpspoof 38
- Selective Sniffing 39
- SSL/SSH Interception 40
- Dsniff evolves: Ettercap 43
- Can It Get Much Easier? 44
- ARP Entries do not age out 46
- Community Ports 46
- Private VLAN Configuration 47
- More ARP Spoof Mitigation 49
- Spanning Tree Attacks 50
- Spanning Tree Basics 51
- STP Attack Mitigation 56
- VLAN Trunking Protocol (VTP) 57
- Potential VTP Attacks 58
- Layer 2 Port Authentication 59
- Dynamic VLAN Access Ports 60
- VMPS Architecture 61
- VMPS/VQP Attacks 62
- VMPS/VQP Attack Mitigation 63
- (TLS, MD5, OTP) 64
- 802.1X Port Authentication 65
- Other Attacks 66
- 0100.0ccc.cccc 67
- CDP Attacks 68
- DHCP Starvation Attacks 69
- Private VLAN Attacks 1/2 71
- Private VLAN Attacks 2/2 72
- PVLAN Attack Mitigation 73
- Nice Try 74
- Random Frame Stress Attack 75
- IP Telephony Considerations 76
- Switch Management 77
- Summary and Case Study 78
- Your Own Security Policy 80
- A Relevant Case Study 81
- A More Secure Alternative 82
- Lessons Learned 83
- Further Reading 84
Prodotti e manuali riguardandi Networking Cisco Ethernet switch
Networking Cisco TES301 Guida Utente
(98 pagine)
(98 pagine)
Networking Cisco 7300-6T3 Specifiche
(50 pagine)
(50 pagine)
Networking Cisco 813 Specifiche
(112 pagine)
(112 pagine)
Networking Cisco Aironet 340 Series Guida Utente
(22 pagine)
(22 pagine)
Networking Cisco Engine 611 Specifiche
(718 pagine)
(718 pagine)
Networking Cisco 3745 Guida di Installazione
(32 pagine)
(32 pagine)
Networking Cisco uBR10-SRP-OC12SML Specifiche
(236 pagine)
(236 pagine)
Networking Cisco UBR904 - Router - EN Specifiche
(30 pagine)
(30 pagine)
Networking Cisco AIR-PCM352 - Aironet 350 Series 11Mbps Wireless LAN PC Card Adapter Manuale Utente
(6 pagine)
(6 pagine)
Networking Cisco RPM-XF Specifiche
(688 pagine)
(688 pagine)
Networking Cisco IAD2431-16FXS Guida Utente
(94 pagine)
(94 pagine)
Networking Cisco 2613 Manuale Utente
(16 pagine)
(16 pagine)
Networking Cisco IOS Router Manuale Utente
(9 pagine)
(9 pagine)
Kenwood MFJ-286 manuali
Manuali dei proprietari e guide per l'utente per Microfoni Kenwood MFJ-286.
We fornisce 1 manuali pdf Kenwood MFJ-286 per scaricare gratuitamente in base al tipo di documento: Manuale Utente
Commenti su questo manuale