Capturing and analysing network traffic to intercept data, including credentials and sensitive information.
Packet sniffing involves capturing network traffic using specialised software (like Wireshark) or hardware. On unencrypted networks, sniffing reveals transmitted data including credentials, emails, and file contents. While packet capture has legitimate uses (network troubleshooting, security analysis), attackers use it to harvest credentials and sensitive information. Encryption (HTTPS, VPN) protects against sniffing by making captured data unreadable. Switched networks limit casual sniffing, but compromised network devices or man-in-the-middle positions still enable interception.
Why It Matters
The DSC Perspective:
Packet sniffing is why encryption matters. On your network, be aware that captured traffic could reveal sensitive data if not encrypted. Ensure sensitive applications use HTTPS and consider network segmentation for sensitive systems.