ARP Poisoning

[sonofsade]

On a switched network in my business. My office is too far from the network hub.

After doing an ARP poisoning test with Cain and Abel, capsa is monitoring most things nicely, http etc.

However, after following instructions for e-mail monitoring, Capsa is only logging my own smtp and pop3.It is not picking up other e-mails on the network.

Is there a reason for this?

Best regards,
William

[sonofsade]

I am running Capsa concurrently with C&A as a sniffer. Is there a problem with this for picking up packets?

[brian_mi]

Hi, sonofsade,

Did you set up SPAN (or port mirroring) on your switch?

[sonofsade]

No I don't know how to do this. Usually with ARP poisoning I am able to use a sniffer to inspect all traffic redirected from the target machine via my machine. I don't want my IT guyto know that I occasionally monitor my staff.

Does Capsa work differently to programs such as Give Me Too which worked perfectly under these conditions?

[Colasoft Support]

Hi sonofsade,

Thanks for your interests in Capsa.

You could go through the Packet tab to check whether any smtp and pop3 packets are captured. Those emails transmitted with SSL connections will not be logged.

Thanks.