Okay, so I tried to use dsniff and ettercap yesterday to try and sniff telnet login activity on a virtual network I have made through VMs .. dsniff and ettercap just won't catch anything, even though wireshark was catching stuff like mad ..
I have the following setup in VM:
Victim (Ubuntu v7): 192.168.26.134
Server (Ubuntu v9): 192.168.26.142
Hacker (Backtrack v4): 192.168.26.129
Gateway (my physical computer - Windows 7): 192.168.26.1
Supposing that the Victim is telnetting into the Server, which commands to I run on the Hacker computer to capture the passwords ?? I tried all kinds of permutations for IPs with arpspoof yesterday and dsniff just didn't catch anything .. !! Can someone please tell me which commands do I run for using dsniff in the Hacker machine .. ? This really pissed me off yesterday ... I even had set that forwarding bit to 1, and still it didn't work ..
Also I wanted to know, would arp poisoning be needed if the victim, server, gateway and hacker machines are all connected in a private network through a hub ? I mean, in a hub, everyone can listen to all packets, right ? For a switch you may need arp spoofing, but when just a single hub is connecting all 4 machines, arp spoofing would not be needed, right ?