We met at a locally owned coffee house, which has an 'open' wireless
access point. After less than ten minutes walkthrough, from the
pre-meeting posts
(1,
2,
3, and
4),
all the units present -- NetBSD, FreeBSD, Red Hat
Linux 7.3 and 8.0, and yes, even a Windows 982E -- were connected either
to the shop's access point, or a backside wireless link; some attendees
jacked in across a non-routed, wired private subnet on a
'victim' box running Red Hat Linux 8.0.
The web form down this
link
(view
source) has no real userid or password -- it is structured for
easy 'sniffing' with embedded tracer deadbeef markers. An
annotated trace of a real 'sniffed' conversation, a pointer to a
chart on the OSI stack, and a 'further reading' link.
Attendees were led through some simple tcpdump and
ethereal tracing; some sniffed from their local units; others
ssh'ed in to the 'victim' box, and popped a tcpdump and
ethereal window back through their connection; others connected
to a vncserver, either with vncviewer or the web
view capability of VNC.