Hi,
I know of cain and its arp-poisoning possibilities.
I wonder if there is another program that can also use the same technique, and allow an "external sniffer"?
I want to use ethereal as sniffer, and I tried to use it in combination with cain, but ethereal didn't captured any traffic (except the arp packets).

Thanks in advance.

arptoxin, ettercap, others would be..
http://www.google.com/search?hl=en&ie=UTF-...G=Google+Search and umm...
http://www.google.com/search?hl=en&lr=&ie=...son&btnG=Search

Ettercap is really great, but sometimes it's fucke' up whole network

Also don't forget to checkout dsniff tools.

thanks a lot, all.

I'll try them.

so the solution is to run ethereal with cain to get remote packet sniffing with all sent and recieved data ?

yes, you should use cain or arptoxin to do the arp-posoning, and then use ethereal to sniff the packets ( which arrive now to you too).

use ettercap, its also having the feature to poise of an ARP to a particular Host for the same subnet, hence easily can able to bypass the IDS sensor if all connectivity on a layer2 switch.

can eaisly sniff the traffic in a switched enviorement.