Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 28 Jul 1997 20:36:27 -0400
From:      "Gary Palmer" <gpalmer@FreeBSD.ORG>
To:        Brian Buchanan <brian@thought.res.cmu.edu>
Cc:        "Nicole H." <nicole@mediacity.com>, security@FreeBSD.ORG
Subject:   Re: Detecting sniffers (was: Re: security hole in FreeBSD) 
Message-ID:  <8208.870136587@orion.webspan.net>
In-Reply-To: Your message of "Mon, 28 Jul 1997 19:06:47 EDT." <Pine.BSF.3.96.970728190019.26892A-100000@thought.res.cmu.edu> 

next in thread | previous in thread | raw e-mail | index | archive | help
Brian Buchanan wrote in message ID
<Pine.BSF.3.96.970728190019.26892A-100000@thought.res.cmu.edu>:
> I was wondering the same thing when I read a clause prohibiting the use of
> network cards in promiscuous mode in the CMU network use policy.  I asked
> some computer security people I knew about this and their response was
> that it is not possible to detect if a network card is in promiscious mode
> unless you have access to the machine it's in - i.e., that you can look at
> ifconfig on that machine.

That only works if ifconfig has not been altered to hide the flag.

Gary
--
Gary Palmer                                          FreeBSD Core Team Member
FreeBSD: Turning PC's into workstations. See http://www.FreeBSD.ORG/ for info



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?8208.870136587>