Re: [Xen-users] traffic sniff problem

[Thomas Ronner <thomas@xxxxxxxxxx>]

On 18 Jun 2010, at 14:51, Jingyun He wrote:

> Hello,
> I have xen node, it has a few VPSes, it used bridge network mode, and
> we noticed that if one vps is restarted or a new vps is started, the
> bridge will send all traffic to all interface during a few seconds,
> and I did run a sniff program in one vps, it successful restrived some
> password with these traffic.
>
> Any solution?

The above situation also occurs with physical switches. When the  
topology changes or someone floods the switch with lots of mac- 
addresses it temporarily runs in hub-mode forwarding everything. A  
switch is a device for enhancing performance, not security.
The only solution is not to send passwords in clear text (which is a  
good idea in any case).

Thomas.

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users