From owner-freebsd-security Fri Jan 5 21:22:37 2001 From owner-freebsd-security@FreeBSD.ORG Fri Jan 5 21:22:34 2001 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from homer.softweyr.com (bsdconspiracy.net [208.187.122.220]) by hub.freebsd.org (Postfix) with ESMTP id A8B3737B400; Fri, 5 Jan 2001 21:22:33 -0800 (PST) Received: from [127.0.0.1] (helo=softweyr.com ident=Fools trust ident!) by homer.softweyr.com with esmtp (Exim 3.16 #1) id 14EluA-0000Fw-00; Fri, 05 Jan 2001 22:28:38 -0700 Sender: wes@FreeBSD.ORG Message-ID: <3A56AD06.BDD770B0@softweyr.com> Date: Fri, 05 Jan 2001 22:28:38 -0700 From: Wes Peters Organization: Softweyr LLC X-Mailer: Mozilla 4.75 [en] (X11; U; Linux 2.2.12 i386) X-Accept-Language: en MIME-Version: 1.0 To: sthaug@nethelp.no Cc: matrix@ipform.ru, questions@FreeBSD.ORG, security@FreeBSD.ORG Subject: Re: Building a local network on switches (ANTISNIFFER measures) References: <000b01c07741$c85272c0$0c00a8c0@ipform.ru> <63189.978720488@verdi.nethelp.no> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org sthaug@nethelp.no wrote: > > > Somebody said, that there is way to fool but floodding it with weird > > arpa entries and the switch will fall back into hub mode. I wonder if it > > is true for all hubs and if I can use non SNMP controllable hub. > > Think about how a hub works (or for that matter a switch). It has a > MAC address table of a certain finite size. If you send packets with > a MAC address which is not in the address table, the packet must be > transmitted on all ports (except the one it arrived on). Except some managed switches allow you to specify certain MAC addresses that are allowed on a given port. Packets received from other MAC addresses are dropped. -- "Where am I, and what am I doing in this handbasket?" Wes Peters Softweyr LLC wes@softweyr.com http://softweyr.com/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message