MAC spoofing in a switch LUT

as title says it all. Thsi thread can be taken as a continuation of Goyal's thread "changing Physcial address of a computer"
Now consider this where you have a 4 port switch of which one port(say port no 4) is connected to a hub which supports 3 more systems.
switch A, HUB H
Switch LOOK UP table can be something like
MAC----PORT
A ------1
B ------2
C ------3
D ------4
D ------4 // this should have been E -----4 , E has spoofed D MAC ID
F-------4

now, if A has data for original D , how does it flow without being intercepted by E acting as D.
infact even without a hub or anyhting , just a normal switch lookups having a faulty entry, is there a possible solution to send datagrams securely?

Replies

Welcome, guest

Join CrazyEngineers to reply, ask questions, and participate in conversations.

CrazyEngineers powered by Jatra Community Platform

  • Ashraf HZ

    @Ash Feb 1, 2010

    durgaas title says it all. Thsi thread can be taken as a continuation of Goyal's thread "changing Physcial address of a computer"
    Now consider this where you have a 4 port switch of which one port(say port no 4) is connected to a hub which supports 3 more systems.
    switch A, HUB H
    Switch LOOK UP table can be something like
    MAC----PORT
    A ------1
    B ------2
    C ------3
    D ------4
    D ------4 // this should have been E -----4 , E has spoofed D MAC ID
    F-------4

    now, if A has data for original D , how does it flow without being intercepted by E acting as D.
    infact even without a hub or anyhting , just a normal switch lookups having a faulty entry, is there a possible solution to send datagrams securely?

    In this instance, you may need to rely on the upper layers of TCP/IP for the required security.

  • optimystix

    @optimystix-4yMPKC Feb 1, 2010

    ashIn this instance, you may need to rely on the upper layers of TCP/IP for the required security.

    but since the mac has been spoofed , wont the arp itself be misled ?