Re: STP mitm attack idea
--=-wKLt1+diNnM9o2nARCiy
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable
Am Dienstag, den 27.04.2010, 19:55 +0200 schrieb Przemyslaw Borkowski:
> Second scenario:
> 1. Station C and station D starts to send frames to break link beetween s=
witch 1 and switch 2, and announce non existing connection and switch from =
C port on switch 1 to D port on switch 2
>=20
> A ---- switch 1 --X-- switch 2 ----- B
> | |
> | |
> C --no conn-- D
> 2. Station A sends frame to B
> 3. Frame is forwarded to C station
> 4. Station C stores frame in memory
> 5. After equal timing station C and station D repair link beetween switch=
1 and 2
> 6. station C resends stored packet to station D (ie in tunnel or encapsul=
ated in ip packet)
> 7. stations C and D break link beetween switches 1 and 2
> 8. station D sends transmitted packet to station B
If you had a WLAN-link, you could simplify that a lot - as far as I
understand, you are able to make the switches redirect the traffic to
your machines.
Anyway, this attack sounds like something a good switch can easily
prevent by having a list of "STP trusted ports" or something like that.
Doesn't that exist?
--=-wKLt1+diNnM9o2nARCiy
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: Dies ist ein digital signierter Nachrichtenteil
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEABECAAYFAkvYYF8ACgkQzjXtStZOSRfEmwCfSNZoByXWv3z3v3N5ABPXigwJ
Fh4An0oEguzRYGr7zyEj3CowPbRabJQp
=hIFi
-----END PGP SIGNATURE-----
--=-wKLt1+diNnM9o2nARCiy--
討論串 (同標題文章)
完整討論串 (本文為第 2 之 8 篇)：