Using MAC flooding to capture ethernet packets

asked 2023-07-26 14:20:07 +0000

I am trying to follow this setup https://gitlab.com/wireshark/wireshar... to capture traffic between two devices on my network. I haven't been able to correctly perform the MAC flooding. The switch I have is a D-Link GO-SW-8G, it doesn't offer any monitor port, I don't think. It doesn't have a configuration interface, and it is unmanaged.

image description

When I run the command "macof -i eth0" the results usually are that after stoping the macof command, I can see in wire shark the traffic from the other 2 devices connected to the switch. But I can only see the traffic going upstream. I can't see any downstream connections. Usually after a while the switch will stop forwarding the upstream traffic to all ports too.

Besides Host A, and Host B being connected to the switch, there is also a router, that provides the gateway to the internet. So a total of 4 ethernet ports are in use. When I perform the MAC flooding attack, I disconnect the router from the switch, and plug it back in after, as to no flood the router also. Am I doing this right?

Can you give me any tips to make this setup work?

edit retag flag offensive close merge delete