Dave Sherohman [esper at sherohman.org] wrote: > 2) Use switches instead of hubs. You can't sniff a packet that > doesn't reach your NIC. This is totally false. There are many ways to sniff a switched network. arp poisoning and arp-cache flooding are the two most common. Just check out ettercap or dsniff. http://ettercap.sourceforge.net/ http://www.monkey.org/~dugsong/dsniff/