This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
Home Products Support Community News


Re: [Xen-users] traffic sniff problem

On 18 Jun 2010, at 14:51, Jingyun He wrote:

I have xen node, it has a few VPSes, it used bridge network mode, and
we noticed that if one vps is restarted or a new vps is started, the
bridge will send all traffic to all interface during a few seconds,
and I did run a sniff program in one vps, it successful restrived some
password with these traffic.

Any solution?

The above situation also occurs with physical switches. When the topology changes or someone floods the switch with lots of mac- addresses it temporarily runs in hub-mode forwarding everything. A switch is a device for enhancing performance, not security.

The only solution is not to send passwords in clear text (which is a good idea in any case).


Xen-users mailing list