Re: Anyone Ported Cisco Discovery Protocol? (CDP)

chris_at_nospam.com
Date: 09/18/04 

Date: Sat, 18 Sep 2004 20:36:31 GMT

Why would you want CDP? In reality, having CDP advertising on the
host ports is a security issue as it advertises switch information
that should be protected.

True story: I took a Redhat RHCE training class and they were having
problems with the clients not getting dhcp reservations. I fired up
ethereal on my workstation and saw they had not disabled CDP on the
host ports. By looknig at those packets, I saw they had not set
"spanning-tree portfast" which was causing the dhcp problems. Then I
politely told them the version of IOS the switch was very outdated and
vulnerable to a few different attacks. They were a bit chagrined
since it was a linux security class. :}

-Chris

On Mon, 19 Jul 2004 11:00:09 -0500, "P. Thompson" <no-spam@new.rr.com>
wrote:

>
>
>On Thu, 15 Jul 2004, Tennis Smith wrote:
>
>> Hi,
>>
>>
>> Has anyone ported CDP to Linux? I'd like to get it rather than having to
>>
>> write it myself.
>
>Google is your friend. http://www.monkeymental.com/nuke/index.php

Quantcast