<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	xmlns:georss="http://www.georss.org/georss" xmlns:geo="http://www.w3.org/2003/01/geo/wgs84_pos#" xmlns:media="http://search.yahoo.com/mrss/"
	>

<channel>
	<title>Hack a Day &#187; Passive Network Tap</title>
	<atom:link href="http://hackaday.com/tag/passive-network-tap/feed/" rel="self" type="application/rss+xml" />
	<link>http://hackaday.com</link>
	<description>Fresh hacks every day</description>
	<lastBuildDate>Sun, 12 Feb 2012 09:34:30 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.com/</generator>
<cloud domain='hackaday.com' port='80' path='/?rsscloud=notify' registerProcedure='' protocol='http-post' />
<image>
		<url>http://1.gravatar.com/blavatar/5560f98f805877b0e332f191cb9e0af3?s=96&#038;d=http%3A%2F%2Fs2.wp.com%2Fi%2Fbuttonw-com.png</url>
		<title>Hack a Day &#187; Passive Network Tap</title>
		<link>http://hackaday.com</link>
	</image>
	<atom:link rel="search" type="application/opensearchdescription+xml" href="http://hackaday.com/osd.xml" title="Hack a Day" />
	<atom:link rel='hub' href='http://hackaday.com/?pushpress=hub'/>
		<item>
		<title>Passive network tap</title>
		<link>http://hackaday.com/2008/09/14/passive-networking-tap/</link>
		<comments>http://hackaday.com/2008/09/14/passive-networking-tap/#comments</comments>
		<pubDate>Sun, 14 Sep 2008 23:27:10 +0000</pubDate>
		<dc:creator>Jason Rollette</dc:creator>
				<category><![CDATA[misc hacks]]></category>
		<category><![CDATA[security hacks]]></category>
		<category><![CDATA[cat5]]></category>
		<category><![CDATA[ethernet]]></category>
		<category><![CDATA[ettercap]]></category>
		<category><![CDATA[network]]></category>
		<category><![CDATA[Passive Network Tap]]></category>
		<category><![CDATA[passive tap]]></category>
		<category><![CDATA[tap]]></category>
		<category><![CDATA[tcpdump]]></category>
		<category><![CDATA[video]]></category>
		<category><![CDATA[wireshark]]></category>

		<guid isPermaLink="false">http://hackadaycom.wordpress.com/?p=3044</guid>
		<description><![CDATA[Making a passive network tap can be an easy and inexpensive undertaking as shown in this Instructable. Passive monitoring or port mirroring is needed because most networks use switches which isolate the network traffic and this does not allow for the entire network to be monitored.  This example uses a single tap, using multiple taps [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=hackaday.com&amp;blog=4779443&amp;post=3044&amp;subd=hackadaycom&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
			<content:encoded><![CDATA[<p><img class="alignnone size-full wp-image-3047" title="Network Tap" src="http://hackadaycom.files.wordpress.com/2008/09/f19f5e1fkuq98pdmedium.jpg" alt="" width="450" height="337" /></p>
<p>Making a <a href="http://en.wikipedia.org/wiki/Network_tap" target="_blank">passive network tap</a> can be an easy and inexpensive undertaking as shown in this <a href="http://www.instructables.com/id/Make_a_Passive_Network_Tap/" target="_blank">Instructable</a>. Passive monitoring or port mirroring is needed because most networks use switches which isolate the network traffic and this does not allow for the entire network to be monitored.  This example uses a single tap, using <a href="http://www.sun.com/bigadmin/content/submitted/passive_ethernet_tap.html" target="_blank">multiple taps</a> will provide access to the full-duplex data separately. By using two taps you are able to monitor inbound data that is passed through one tap, and outbound data that is passed through the other tap.  Separate taps are desired because most sniffer software handles half-duplex traffic only and requires two network cards for full-duplex.</p>
<p><span id="more-3044"></span></p>
<p><img class="alignnone size-full wp-image-3060" title="multi tap" src="http://hackadaycom.files.wordpress.com/2008/09/tap.jpg" alt="" width="450" height="291" /></p>
<p>It is easy to insert a passive Ethernet tap inline, as shown in the picture above from a <a href="http://thnetos.wordpress.com/2008/02/22/create-a-passive-network-tap-for-your-home-network/" target="_blank">different multitap project</a>,  simply plug the incoming line into a host port and a patch cable from the other host port to the outgoing port, then verify your connection status. Now connect the Ethernet port of your sniffer computer into either of the tap connectors on the passive Ethernet tap. This tap works by using sniffer applications that put your <a href="http://en.wikipedia.org/wiki/Promiscuous_mode" target="_blank">Ethernet card into promiscuous mode</a>.  This allows you to monitor all traffic on the network not just the traffic directed to your network adapter. After you install your favorite sniffer program, such as <a href="http://www.wireshark.org/" target="_blank">Wireshark</a>, <a href="http://www.snort.org/" target="_blank">Snort</a>, <a href="http://www.tcpdump.org/" target="_blank">TCPDump</a>, <a href="http://www.winpcap.org/windump/" target="_blank">WinDump</a>, or <a href="http://ettercap.sourceforge.net/" target="_blank">Ettercap</a> to name a few,  you are then able to monitor all traffic any way you see fit, like looking for passwords in the video below.</p>
<span style="text-align:center; display: block;"><a href="http://hackaday.com/2008/09/14/passive-networking-tap/"><img src="http://img.youtube.com/vi/7ezGTP99xSw/2.jpg" alt="" /></a></span>
<br /><img alt="" border="0" src="http://feeds.wordpress.com/1.0/categories/hackadaycom.wordpress.com/3044/" /> <img alt="" border="0" src="http://feeds.wordpress.com/1.0/tags/hackadaycom.wordpress.com/3044/" /> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gocomments/hackadaycom.wordpress.com/3044/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/comments/hackadaycom.wordpress.com/3044/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godelicious/hackadaycom.wordpress.com/3044/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/delicious/hackadaycom.wordpress.com/3044/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gofacebook/hackadaycom.wordpress.com/3044/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/facebook/hackadaycom.wordpress.com/3044/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gotwitter/hackadaycom.wordpress.com/3044/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/twitter/hackadaycom.wordpress.com/3044/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gostumble/hackadaycom.wordpress.com/3044/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/stumble/hackadaycom.wordpress.com/3044/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godigg/hackadaycom.wordpress.com/3044/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/digg/hackadaycom.wordpress.com/3044/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/goreddit/hackadaycom.wordpress.com/3044/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/reddit/hackadaycom.wordpress.com/3044/" /></a> <img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=hackaday.com&amp;blog=4779443&amp;post=3044&amp;subd=hackadaycom&amp;ref=&amp;feed=1" width="1" height="1" />]]></content:encoded>
			<wfw:commentRss>http://hackaday.com/2008/09/14/passive-networking-tap/feed/</wfw:commentRss>
		<slash:comments>22</slash:comments>
	
		<media:content url="" medium="image">
			<media:title type="html">Jason Rollette</media:title>
		</media:content>

		<media:content url="http://hackadaycom.files.wordpress.com/2008/09/f19f5e1fkuq98pdmedium.jpg" medium="image">
			<media:title type="html">Network Tap</media:title>
		</media:content>

		<media:content url="http://hackadaycom.files.wordpress.com/2008/09/tap.jpg" medium="image">
			<media:title type="html">multi tap</media:title>
		</media:content>
	</item>
	</channel>
</rss>
