Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 28 Jul 1997 20:34:09 -0400
From:      "Gary Palmer" <gpalmer@FreeBSD.ORG>
To:        "Nicole H." <nicole@mediacity.com>
Cc:        Robert Watson <robert+freebsd@cyrus.watson.org>, Vincent Poy <vince@mail.MCESTATE.COM>, "[Mario1-]" <mario1@primenet.com>, JbHunt <johnnyu@accessus.net>, security@FreeBSD.ORG, Tomasz Dudziak <loco@onyks.wszib.poznan.pl>
Subject:   Re: security hole in FreeBSD 
Message-ID:  <6954.870136449@orion.webspan.net>
In-Reply-To: Your message of "Mon, 28 Jul 1997 02:22:24 -0800." <Chameleon.870081818.nmh@geekgirl> 

next in thread | previous in thread | raw e-mail | index | archive | help
"Nicole H." wrote in message ID
<Chameleon.870081818.nmh@geekgirl>:


> Does anyone know of a good way to detect people "sniffing" on the
>  network? IE a program that will detect a machine running in
>  promiscuous mode?

There is no way to detect that from outside the machine ... after all,
its just listening to all the packets that go past.

FreeBSD 2.2 and later log a message to console when an interface goes
into promiscuous mode.

The *REAL* answer is to remove BPF from all machines, and make sure
they stay removed.

Gary
--
Gary Palmer                                          FreeBSD Core Team Member
FreeBSD: Turning PC's into workstations. See http://www.FreeBSD.ORG/ for info



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?6954.870136449>