From owner-freebsd-questions Tue Dec 19 14:33:16 2000 From owner-freebsd-questions@FreeBSD.ORG Tue Dec 19 14:33:13 2000 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from elvis.mu.org (elvis.mu.org [207.154.226.10]) by hub.freebsd.org (Postfix) with ESMTP id 2862B37B400; Tue, 19 Dec 2000 14:33:13 -0800 (PST) Received: by elvis.mu.org (Postfix, from userid 1098) id AE1012B280; Tue, 19 Dec 2000 16:33:12 -0600 (CST) Date: Tue, 19 Dec 2000 16:33:12 -0600 From: Bill Fumerola To: Chuck Rock Cc: security@FreeBSD.ORG, questions@FreeBSD.ORG Subject: Re: What anti-sniffer measures do i have? Message-ID: <20001219163312.P72273@elvis.mu.org> References: <200012192213.PAA04005@harmony.village.org> <009001c06a0a$b2163170$1805010a@epconline.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <009001c06a0a$b2163170$1805010a@epconline.net>; from carock@epconline.net on Tue, Dec 19, 2000 at 04:26:13PM -0600 X-Operating-System: FreeBSD 4.2-FEARSOME-20001103 i386 Sender: billf@elvis.mu.org Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Tue, Dec 19, 2000 at 04:26:13PM -0600, Chuck Rock wrote: > I believe most switches are Layer 2 which is MAC based. You would have to > know the MAC address of the computer you want to intercept traffic for, and > then your switch would have to give you the packets instead of erroring out > and or dropping the packets because you can't have two of the same MAC > addresses on the network. > > Has anyone actually gotten another's information spoofing MAC addresses? > > I don't see how this could work. Some switches do bad things when one port reports lots(for various definitions of lots) of MAC addresses behind one port. -- Bill Fumerola - security yahoo / Yahoo! inc. - fumerola@yahoo-inc.com / billf@FreeBSD.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message