From owner-freebsd-net Tue May 23 16:42:39 2000 Delivered-To: freebsd-net@freebsd.org Received: from mail.rz.fh-wilhelmshaven.de (mail.rz.fh-wilhelmshaven.de [139.13.25.134]) by hub.freebsd.org (Postfix) with ESMTP id 5D3DB37B513 for ; Tue, 23 May 2000 16:42:30 -0700 (PDT) (envelope-from ohoyer@fbwi.fh-wilhelmshaven.de) Received: from fettesau.stuwo.fh-wilhelmshaven.de (stuwopc5.stuwo.fh-wilhelmshaven.de [139.13.209.5]) by mail.rz.fh-wilhelmshaven.de (8.9.3/8.9.3) with SMTP id BAA08257 for ; Wed, 24 May 2000 01:42:25 +0200 (MET DST) Message-Id: <4.1.20000524014001.009e0bc0@mail.rz.fh-wilhelmshaven.de> X-Sender: ohoyer@mail.rz.fh-wilhelmshaven.de X-Mailer: QUALCOMM Windows Eudora Pro Version 4.1 Date: Wed, 24 May 2000 01:43:06 +0200 To: freebsd-net@freebsd.org From: Olaf Hoyer Subject: BPF vs. promiscuous mode Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org hi! Whats the real difference between the berkeley packet filter and promiscuous mode? Any URLs explaining that? Also, what about detecting some folks using that from an administrative point of view, e.g. running some software like Antisniff? BTW: Which mechanisms one can use to "fake" MAC entries on (preferrable) Linux systems, and how to detect them? On our dorm network some students do some things that, seen from an administrative point of view, needs to get some ... measures... Regards Olaf Hoyer -------- Olaf Hoyer www.nightfire.de mailto:Olaf.Hoyer@nightfire.de FreeBSD- Turning PC's into workstations ICQ:22838075 Liebe und Hass sind nicht blind, aber geblendet vom Feuer, dass sie selber mit sich tragen. (Nietzsche) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message