New answers tagged spoofing
5
Iain's answer is generally correct, but needs a little expanding to explain why the attack would be difficult to execute.
TCP uses a combination of bit-based flags and 32-bit counters, called sequence and acknowledgement numbers, to drive the state machine that tracks the progress of a TCP connection throughout its life. Understanding how these two 32-bit ...
3
Not under normal circumstances.
The TCP protocol has a 3 way handshake to set up a connection
Host A sends a SYN packet to Host B
Host B sends a SYN ACK packet to host A
Host A sends an ACK packet to host B
and the connection is establishd
Now if we introduce a Host C which spoofs Host A's Address
Host C sends a spoofed SYN packet to Host B
Host B ...
2
You can do that using many switch cisco features, something like:
port-security
set port security 1/1-2 enable # enable port security
set port security 1/1-2 port max 5 # allow 5 MAC address
set port security 1/1-2 violation protect # drop packet beyond 5 MAC address
mac access-list
mac access-list extended ARP_Packet ...
Top 50 recent answers are included
