Question : Problem: Telnet VS ssh

Telnet VS SSH.. I know that ssh is more secure but was wondering how I could show that when someone is telneting into a switch to show that passwords are sent in clear text.  Can someone just use ethereal and that will show telnet access.  I just want to know how a hacker could "see" the telnet input.  I am trying to convinice my boss against using telnet.

Answer : Problem: Telnet VS ssh

Hi mkurtzhals,

for your question, a hacker could eazily change his layer 2 address (MAC address) and pretend to be the device you are trying to reach. later, he can imitate the device's responses and send them to you, and that way he can reach your passwords.
An eazier way would be if you'd telnet the device threw routers where someone else's could sniff the router's port while you communicate with the real device, and that way, he gets your password and data.

Questions ?
ask !

Michel :)