From owner-freebsd-questions@FreeBSD.ORG Fri Apr 21 23:20:43 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 50C0E16A400 for ; Fri, 21 Apr 2006 23:20:43 +0000 (UTC) (envelope-from jekillen@prodigy.net) Received: from smtp114.sbc.mail.mud.yahoo.com (smtp114.sbc.mail.mud.yahoo.com [68.142.198.213]) by mx1.FreeBSD.org (Postfix) with SMTP id E6D3843D45 for ; Fri, 21 Apr 2006 23:20:42 +0000 (GMT) (envelope-from jekillen@prodigy.net) Received: (qmail 99585 invoked from network); 21 Apr 2006 23:20:42 -0000 Received: from unknown (HELO ?75.7.236.225?) (jekillen@prodigy.net@75.7.236.225 with plain) by smtp114.sbc.mail.mud.yahoo.com with SMTP; 21 Apr 2006 23:20:42 -0000 In-Reply-To: <7722667.1145629451907.JavaMail.pibu@Z1DROPOFF> References: <7722667.1145629451907.JavaMail.pibu@Z1DROPOFF> Mime-Version: 1.0 (Apple Message framework v622) Content-Type: text/plain; charset=US-ASCII; format=flowed Message-Id: <8a8d6445ab23d901018c45b7e5ca5360@prodigy.net> Content-Transfer-Encoding: 7bit From: jekillen Date: Fri, 21 Apr 2006 16:20:40 -0700 To: Kevin Kinsey X-Mailer: Apple Mail (2.622) Cc: freebsd-questions Subject: Re: Kernel messages X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Apr 2006 23:20:43 -0000 On Apr 20, 2006, at 7:50 PM, Kevin Kinsey wrote: > jekillen wrote: > (cut) > Not without assistance, most likely ;-). > >> One link is to the inside network and the other is to static ip >> address >> that is assigned but as yet has not been configured on the router to >> receive requests from outside. >> I admit, I am learning at this point. I've been watching the router >> security log and >> have seen just in the last week (as long as it has had the static >> ip's assigned) >> several hundred broadcast amplification attempts blocked. >> And I have been reading my root mail and am now interested in a >> tutorial or >> some published specifics about how to interpret these messages. >> I'm running v6 release on AMD64. I'm setting up to host a web site. >> thanks in advance. >> JK >> PS in the mean time I will be going through what I have already. > > > Generally, "promiscuous mode" is pretty much what you > have guessed ... used in network analysis. Software such > as bpf(4), and higher level apps such as netgraph, tcpdump, > ethereal, etc. use "promiscuous mode" to grab network traffic. > So, the first thing you ask yourself is, have I (or anyone allowed > to be "root") used any of this type of software? > > There might be other explanations, but I'm not suitably > prepared to address them. > > Kevin Kinsey Actually I neglected to mention that I had used tcpdump on this machine but not a 3 AM in the morning. But that is probably what it is all about. JK > -- > The idle mind knows not what it is it wants. > -- Quintus Ennius > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org" >