Ethernet switches can be adversely affected by rapidly bombarding them with spoofed ARP responses. he port to MAC address table (CAM TABLE) overflows on the switch, and rather than failing completely, moves into broadcast mode, then the hacker can sniff all of the packets on the network.
Which of the following tool achieves this?
A.
./sniffof
B.
./dsniff
C.
./switchsnarf
D.
./macof
Explanation:
macof floods the local network with random MAC addresses (causing some switches to fail open in repeating mode, facilitating sniffing).
I agree with the answer. D