Re: POP3 passwords

["Simon Garner" <sgarner () expio co nz>]

On Wednesday, October 22, 2003 7:59 AM [GMT+1200=NZT],
Francisco Andrades <fandrades () nextj com> wrote:

> Steve McLaughlin wrote:
> > Would it be possible to spoof the IP of the POP3 server to the mail
> > client over the internet from a dummy mail server, using say,
> > Packit, and then, sniff the packets hitting the LAN card?
>
> 100% doable. In fact you can use ARP spoofing to redirect any
> communication through a sniffer. That includes telnet, ftp, POP3,
> IMAP, TLS/SSL, SSH (of course, in the case of secure protocols it's
> of no use because you receive encrypted streams).

Not over the Internet you can't.

-Simon


---------------------------------------------------------------------------
Visual & Easy-to-use are not words that you think of when talking about 
network analyzers. Are you sick of the three window text decodes? Download ClearSight Network's Analyzer and see a new 
network analysis tool that 
makes the complex - easy
www.clearsightnet.com/jmp6-downloadtrial.jsp
----------------------------------------------------------------------------