Can a file being copied over my LAN be sniffed?

Question

I'd like to know if a file (PDF, JPG, or whatever) that I copy with .NET code between two computers in my LAN can be easily sniffed and obtained. If so, what would it take to do it?

How trivial would it be?

Thanks.

Answer 1

@wizlog, sniffing is the act of reading the contents of packets of data, regardless of the structure of the network those packets are traveling over.

@silvercore, the answer is yes. Generally the sniffer would have to have access to the same network as you, but unless you are encrypting the file transfer the contents of any file or data transfered will be accessible to any sniffers with appropriate access. To clarify, a sniffer properly situated will always be able to view the contents of the packets traveling across the network, encryption only makes the task of understanding the contents of those packets more difficult.

You can test this by installing Wireshark on a third computer and setting it to collect packets while the transfer is occuring and watch the output.

UPDATE: Info based on HarryMC's answer below:

While you, with Wireshark, will probably have issues "reading" the contents of the file you transfer, even if it is not encrypted, in Wireshark you should be able to set filters to search for certain strings in the packet contents. Reading the file name of the file to be transfered shouldn't be too hard, nor would reading any information on the sort of packaging utility used to create the file. The information you can easily read should give some indication of the file contents without needing to extract the file data and recreate it.

Answer 2

It is possible. However, it will require physical access to your network. Anyone who can plug something into a network port on your hub, switch or router, can attempt to eavesdrop on your LAN traffic, with a different degree of success.

1. Hubs: older equipment, now mostly replaced by switches. Extremely easy to eavesdrop, since every port sees everything that goes on every other port.

2. Switches: more complex to eavesdrop. However, successful attack is possible. For example, sometimes overwhelming a switch with fake specially crafted packets will switch it into a hub mode.

3. Routers: depends on the configuration and security of the router itself.

All in all, with right hardware and software, it is possible, and has been done many times. Wired networks have to be secured against physical access otherwise they are often less secure than wireless ones.

Answer 3

With the right utility, everything is possible. So if "possible" is the question, then the answer is "yes".

But this would require high hacking ability. So if "easily" is the question then the answer is "no".