From owner-freebsd-net Sat Jan 1 15:50:23 2000 Delivered-To: freebsd-net@freebsd.org Received: from dipsy.tch.org (dipsy.tch.org [166.88.4.10]) by hub.freebsd.org (Postfix) with ESMTP id 46FFA14FCD for ; Sat, 1 Jan 2000 15:50:21 -0800 (PST) (envelope-from ser@dipsy.tch.org) Received: (from ser@localhost) by dipsy.tch.org (8.10.0.Beta6/8.10.0.Beta6) id e01NoA803849; Sat, 1 Jan 2000 15:50:10 -0800 (PST) Date: Sat, 1 Jan 2000 15:50:10 -0800 From: Steve Rubin To: DRHAGER@de.ibm.com Cc: fgont@softhome.net, freebsd-net@FreeBSD.ORG, mkc@Graphics.Cornell.EDU Subject: Re: your mail Message-ID: <20000101155009.A3821@tch.org> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0i In-Reply-To: ; from DRHAGER@de.ibm.com on Sat, Jan 01, 2000 at 08:28:42AM +0100 Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Buy a switch.. They are cheap. And if your really paranoid you can use static arp entries on your servers/routers. On Sat, Jan 01, 2000 at 08:28:42AM +0100, DRHAGER@de.ibm.com wrote: > > > If you are a cracker, you try to take down the other system someway. > Duplicate MAC-adresses (the hardware adress of your device) or duplicate > IP adresses are very hard to determine - ar least in my expirience. > A big segment with PCs and a lot of curios and "skilled" users can be hell. > > And shooting them or cutting off fingers is considered as unprofessionel. > :-< > > If someone is root on his system, how do you stop him from reading pakets? > There is no way to tell a packet to avoid being read by tcpdump - or am I > confused? > > You can scan and search cards in promicuos mode, but this leads back to > shooting and cutting fingers. > Or you can buy cards which dont provide this feature - this exists for token > ring. > > Happy new year / prosperos ano nuevo > Orm > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-net" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message