Date: Fri, 05 Jan 2001 22:28:38 -0700 From: Wes Peters <wes@softweyr.com> To: sthaug@nethelp.no Cc: matrix@ipform.ru, questions@FreeBSD.ORG, security@FreeBSD.ORG Subject: Re: Building a local network on switches (ANTISNIFFER measures) Message-ID: <3A56AD06.BDD770B0@softweyr.com> References: <000b01c07741$c85272c0$0c00a8c0@ipform.ru> <63189.978720488@verdi.nethelp.no>
next in thread | previous in thread | raw e-mail | index | archive | help
sthaug@nethelp.no wrote:
>
> > Somebody said, that there is way to fool but floodding it with weird
> > arpa entries and the switch will fall back into hub mode. I wonder if it
> > is true for all hubs and if I can use non SNMP controllable hub.
>
> Think about how a hub works (or for that matter a switch). It has a
> MAC address table of a certain finite size. If you send packets with
> a MAC address which is not in the address table, the packet must be
> transmitted on all ports (except the one it arrived on).
Except some managed switches allow you to specify certain MAC addresses
that are allowed on a given port. Packets received from other MAC
addresses are dropped.
--
"Where am I, and what am I doing in this handbasket?"
Wes Peters Softweyr LLC
wes@softweyr.com http://softweyr.com/
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3A56AD06.BDD770B0>