Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 05 Jan 2001 22:28:38 -0700
From:      Wes Peters <wes@softweyr.com>
To:        sthaug@nethelp.no
Cc:        matrix@ipform.ru, questions@FreeBSD.ORG, security@FreeBSD.ORG
Subject:   Re: Building a local network on switches (ANTISNIFFER measures)
Message-ID:  <3A56AD06.BDD770B0@softweyr.com>
References:  <000b01c07741$c85272c0$0c00a8c0@ipform.ru> <63189.978720488@verdi.nethelp.no>

next in thread | previous in thread | raw e-mail | index | archive | help
sthaug@nethelp.no wrote:
> 
> > Somebody said, that there is way to fool but floodding it with weird
> > arpa entries and the switch will fall back into hub mode. I wonder if it
> > is true for all hubs and if I can use non SNMP controllable hub.
> 
> Think about how a hub works (or for that matter a switch). It has a
> MAC address table of a certain finite size. If you send packets with
> a MAC address which is not in the address table, the packet must be
> transmitted on all ports (except the one it arrived on).

Except some managed switches allow you to specify certain MAC addresses
that are allowed on a given port.  Packets received from other MAC
addresses are dropped.

-- 
            "Where am I, and what am I doing in this handbasket?"

Wes Peters                                                         Softweyr LLC
wes@softweyr.com                                           http://softweyr.com/


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3A56AD06.BDD770B0>