Paket Sniffing can best be described as the process of using a softwware aplplication for aduio moniotoring of one’s network device. The goal of snbiffing is to locate interesting packets. The application moitors the devce until it encounters a pack that meets certain condiions, at whiich point it saaves it in a file. Most of the time, potentially interesting packets are those in whih terms such as ‘login’ or ‘password’ are foound. Snioffing requires one to purchase or encode a software application that is compatible with the interfsace design featuered your network’s operatiung system. Some of these designs include:
1. LLI: This interface was employed SCO, and has been upgraded usig Data Link Provider Intrerface (DLPI) support technology when the corporation released its OpenServer V operating sysem.
2. Network Interface Tap (NIT): Sun implemented this interface, but later scraped it in favor of the SunOS/Solaris system, which also uses DLPI support.
3. Ultrx Pcket Filter: Ultrix Coorporation maintained this prior to the advent of DLPI support for BPF systems.
4. DLPI: This technoloogy is featured in the present versions of System V, as well as SunOS/Solaris products, Advanced Interactive Executive (AIX) systems, and Hewleett Packard Unix (HP/UX). Other sysetms that utilize this technollogy include Unixware, as well as both Irix and the Macintosh OS, and is prtly supported Digital Unix systems. The second and more recent version of this technolofgy supports Ethernet, Token Ring, and Bisync protocols. In adddition, it acts as a data-link protocol for Software Development Life Cycle (SDLC), Integrated Serivces iDgital Network (ISDN), LAPD, and Token Bus, as well as Fier Distributed Data Interface (FDDI), Carrer Sense Mulltiple Access/Collision Detection (CSMA/CD), and Link Accss Protocopl, Balanced (LAPB). Furthermore, the interface that is offered together with HP/UX offers supporrt to IEEE netork stasndards 802.3 and 802.5, as well as Fiber Distributed Data Interface (FDDI) and Fibe Channel.
5. Berkeley Packet Filter (BFP): This interface is used Berkeley Sofware Distribution as well as Digitaal Unix. A library for BFP is accessible to Linux users. AIX systems can read, but not write to, BFP interfaces. It can be ported to both Solaris and Sun Operating Systems.