From owner-freebsd-security Tue Jun 12 12:51:30 2001 Delivered-To: freebsd-security@freebsd.org Received: from hotmail.com (f202.law11.hotmail.com [64.4.17.202]) by hub.freebsd.org (Postfix) with ESMTP id 551A137B405 for ; Tue, 12 Jun 2001 12:51:18 -0700 (PDT) (envelope-from derekoflynn@hotmail.com) Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Tue, 12 Jun 2001 12:51:17 -0700 Received: from 155.58.130.143 by lw11fd.law11.hotmail.msn.com with HTTP; Tue, 12 Jun 2001 19:51:17 GMT X-Originating-IP: [155.58.130.143] From: "Derek O'Flynn" To: freebsd-security@freebsd.org Date: Tue, 12 Jun 2001 14:51:17 -0500 Mime-Version: 1.0 Content-Type: text/plain; format=flowed Message-ID: X-OriginalArrivalTime: 12 Jun 2001 19:51:17.0951 (UTC) FILETIME=[0BB704F0:01C0F379] Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org I have two machines, one running freebsd 4.0, and one running 4.3. They are physically connected to the same hub (same segment) When running tcpdump or snort on the 4.0 box, I get traffic from a variety of protocols However, when I run tcpdump or snort on the 4.0 box, I get traffic from a variety of protocols, but no tcp protocol traffic. The only time tcp protocol shows up is if I connect to the web server on the 4.3 box from another machine. Strangest thing I've ever seen! Anyway, I thought it might have been cause I did a minimal installation, and maybe something was disabled, so I setup the box again with a full install of everything but X, and the same thing is occurring. I then thought it was the network card, but that can't be cause it is receiving tcp packets, but only those destined for the machine, nothing else on the segment. Is there a setting that causes it to only see it's tcp packets (note: it is seeing icmp/udp/arp packets from other sources) Does anyone know if there's something weird with 4.3 that would cause this? I'm running the 4.3 iso image downloaded from freebsd. It hasn't been modified at all, standard installation. _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message