sniff RSS

ethernet, gigabit, lan, NAC, network, packet, Skunk, sniff, usb -

After reading many of your messages about the Skunk and its features, I was able to get a better understanding of what most users needed. I took some time the past few days to work on implementing the features that seemed to warrant the highest attention. So here it is (finally): version 1.2.0 of the Skunk firmware. In in this article I will try to present the changes brought along by this new update. A better command-line interface One of the key advantages of the Skunk is the simplicity with which it can be configured, simply by plugging in a...

Read more

3D print, case, enclosure, ethernet, netsplit, sniff -

Is your Netsplit tearing up the pockets of your delicate suits while on assignment? Well, you are not alone! I must admit I have been experiencing the same issue myself. This prompted me to design a small cover for the back of the Netsplit - just enough to protect the exposed pins (or rather, protect your clothes from them). After a bit of playing around in Fusion 360, I had exactly what I wanted. I started from the actual PCB outline layer, which I exported as DXF - a format which can be easily imported in Fusion. Printing the result on...

Read more

bypass, gigabit, NAC, network, Skunk, sniff -

The Skunk is a Gigabit Ethernet tap and switch. Use it as a basic switch whenever you need one, or use it to sniff packets at gigabit speeds. Or write a custom firmware to do something else entirely. That's right - the Skunk firmware is open-source, simple and built with the Dooba SDK. In fact, go check it out if you are interested: https://bitbucket.org/dooba_core/skunk. When it's time to sniff some packets, the Skunk is ready to go in a single command via USB - no fumbling with complex web interfaces and IP address configuration madness. Plug in the cables, enable sniffing and start...

Read more

ethernet, inspection, lan, netsplit, packet, sniff -

Meet the Swiss pocket knife of network traffic inspection Netsplit is a passive Ethernet tap device, making it easy to sniff packets across Ethernet links. Place the Netsplit between two devices and monitor network traffic on the tap ports. This works by forcing the devices into 10/100 mode (prohibiting gigabit-speed comms) also known as "Fast Ethernet", which is well suited for passive monitoring. The two ports at the ends of the Netsplit are wired together normally as would a standard cable. However, their respective transmission lines are mirrored to the center "tap" ports. Because only the transmission lines are mirrored to...

Read more