Date: Mon, 15 Feb 1999 13:14:44 PST From: Bill Fenner <fenner@parc.xerox.com> To: Barney Wolff <barney@databus.com> Cc: freebsd-net@FreeBSD.ORG Subject: Re: Router stats & NIC in prom. mode... Message-ID: <99Feb15.131449pst.177534@crevenia.parc.xerox.com> In-Reply-To: Your message of "Mon, 15 Feb 99 11:31:00 PST." <36c877540.71db@databus.databus.com>
next in thread | previous in thread | raw e-mail | index | archive | help
In message <36c877540.71db@databus.databus.com> you write: >Send a packet to the IP of the suspect machine, with a "wrong" MAC. >If it answers, it's snooping. Not surefire, of course, but probably >works unless the bad guy has altered the net code. Er, only works if the bad guy has altered the net code, ignoring buggy drivers. (Non-buggy drivers drop packets that are not destined for this host after handing them to bpf if IFF_PROMISC.) Bill To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?99Feb15.131449pst.177534>