Sniff niffer er is a ro ram ram or dev device ice tha that ca tur tures the vital information from the network traffic specific to a particular network The objective of sniffing is to steal: • Password Passwordss (from (from email, email, the web, web, SMB, SMB, ftp, SQL, or telnet) • Emai Emaill text text • Files in transfer email files ft files or SMB) EC-Council
Protocols Vulnerable to Sniffing Protocols that are susceptible to sn ers nc u e: • Telnet Telnet and Rlogin: Rlogin: Keystrok Keystrokes es includin including g user names names • • • • • •
EC-Council
HTTP: HTTP: Data sent in the clear text SMTP: SMTP: Passwor Passwords ds and data sent in clear text NNTP: NNTP: Password Passwordss and and data sent in clear text POP: Password Passwordss and data sent in clear text FTP: Passwor Passwords ds and data sent in clear clear text IMAP: IMAP: Password Passwordss and data sent in clear text