From owner-freebsd-isp  Tue Aug 31  2: 0:15 1999
Delivered-To: freebsd-isp@freebsd.org
Received: from caladan.tdx.co.uk (caladan.tdx.co.uk [195.188.177.4])
	by hub.freebsd.org (Postfix) with ESMTP id 8B18915398
	for <freebsd-isp@FreeBSD.ORG>; Tue, 31 Aug 1999 02:00:01 -0700 (PDT)
	(envelope-from kpielorz@tdx.co.uk)
Received: from tdx.co.uk (lorca-tx.tdx.co.uk [195.188.177.242])
	by caladan.tdx.co.uk (8.9.3/8.9.3/Kp) with ESMTP id WAA10440;
	Tue, 24 Aug 1999 22:14:39 +0100 (BST)
Message-ID: <37C30B3E.B1D894DA@tdx.co.uk>
Date: Tue, 24 Aug 1999 22:14:38 +0100
From: Karl Pielorz <kpielorz@tdx.co.uk>
Organization: TDX - The Digital eXchange
X-Mailer: Mozilla 4.61 [en] (WinNT; I)
X-Accept-Language: en
MIME-Version: 1.0
To: Shawn Workman <shawn@bsdguy.com>
Cc: Stuart Henderson <stuart@eclipse.net.uk>,
	Dominik Brettnacher <domi@saargate.de>, freebsd-isp@FreeBSD.ORG
Subject: Re: IP Accounting
References: <Pine.BSF.4.10.9908242135330.1919-100000@dominik.saargate.de> <37C302EC.45A675B8@eclipse.net.uk> <036301beee72$9ddd48c0$24a535cf@ieasoftware.com>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org



Shawn Workman wrote:
> 
> I always see that my NIC is in promiscuous mode, is that a bad thing?
> 
> how do I change it if it is?

By default it should not be in promiscuous mode unless your running something
like traffhow, or tcpdump (or, I believe DHCP?) etc. (all of which AFAIK use
the bpf device).

Does your Kernel have the bpf device in it? - i.e. in it's config file? - How
do you know the card is in promiscuous mode?

Promiscuous mode means your network card will receive and process every packet
on the network cable your on, even those not destined for your own machine /
self.

It's sometimes used by hackers to 'sniff' networks for passwords, un-encrypted
telnet sessions etc. [Or just to watch the traffic go by... :)]

As to how to change it? - First find out why it's in promisc. mode if it is...
You can't go and compile out the bpf devices in the kernel, if something your
using actually needs them?! :-)

-Kp


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message