From owner-freebsd-questions@FreeBSD.ORG Fri Apr 21 02:08:27 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id DF84316A403 for ; Fri, 21 Apr 2006 02:08:27 +0000 (UTC) (envelope-from jekillen@prodigy.net) Received: from smtp113.sbc.mail.mud.yahoo.com (smtp113.sbc.mail.mud.yahoo.com [68.142.198.212]) by mx1.FreeBSD.org (Postfix) with SMTP id 7683343D45 for ; Fri, 21 Apr 2006 02:08:27 +0000 (GMT) (envelope-from jekillen@prodigy.net) Received: (qmail 73880 invoked from network); 21 Apr 2006 02:08:26 -0000 Received: from unknown (HELO ?75.7.236.225?) (jekillen@prodigy.net@75.7.236.225 with plain) by smtp113.sbc.mail.mud.yahoo.com with SMTP; 21 Apr 2006 02:08:26 -0000 Mime-Version: 1.0 (Apple Message framework v622) Content-Transfer-Encoding: 7bit Message-Id: Content-Type: text/plain; charset=US-ASCII; format=flowed To: freebsd-questions From: jekillen Date: Thu, 20 Apr 2006 19:08:24 -0700 X-Mailer: Apple Mail (2.622) Subject: Kernel messages X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Apr 2006 02:08:28 -0000 Hello; I have a question about a disconcerting event relayed to me from my kernel. there are eight entries regarding network interface status: rl0 link changed to DOWN " " " UP " " " DOWN " " " UP sis0 promiscuous mode enabled " " disabled " " enabled " " disabled The disconcerting entries are re sis0 promiscuous mode enabled. Is the kernel trying to eaves drop on someone? One link is to the inside network and the other is to static ip address that is assigned but as yet has not been configured on the router to receive requests from outside. I admit, I am learning at this point. I've been watching the router security log and have seen just in the last week (as long as it has had the static ip's assigned) several hundred broadcast amplification attempts blocked. And I have been reading my root mail and am now interested in a tutorial or some published specifics about how to interpret these messages. I'm running v6 release on AMD64. I'm setting up to host a web site. thanks in advance. JK PS in the mean time I will be going through what I have already.