From owner-freebsd-questions Thu Apr 8 18: 8:26 1999 Delivered-To: freebsd-questions@freebsd.org Received: from allegro.lemis.com (allegro.lemis.com [192.109.197.134]) by hub.freebsd.org (Postfix) with ESMTP id 1233014E82 for ; Thu, 8 Apr 1999 18:08:02 -0700 (PDT) (envelope-from grog@freebie.lemis.com) Received: from freebie.lemis.com (freebie.lemis.com [192.109.197.137]) by allegro.lemis.com (8.9.1/8.9.0) with ESMTP id KAA22960; Fri, 9 Apr 1999 10:36:00 +0930 (CST) Received: (from grog@localhost) by freebie.lemis.com (8.9.3/8.9.0) id KAA24083; Fri, 9 Apr 1999 10:35:59 +0930 (CST) Message-ID: <19990409103558.R2142@lemis.com> Date: Fri, 9 Apr 1999 10:35:58 +0930 From: Greg Lehey To: Doug White , Huang Min Cc: questions@FreeBSD.ORG Subject: Re: Promiscuous mode? References: <370C27D0.3E66BEAB@public.cta.cq.cn> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.93.2i In-Reply-To: ; from Doug White on Thu, Apr 08, 1999 at 12:22:14PM -0700 WWW-Home-Page: http://www.lemis.com/~grog Organization: LEMIS, PO Box 460, Echunga SA 5153, Australia Phone: +61-8-8388-8286 Fax: +61-8-8388-8725 Mobile: +61-41-739-7062 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Thursday, 8 April 1999 at 12:22:14 -0700, Doug White wrote: > On Thu, 8 Apr 1999, Huang Min wrote: > >> hi, everybody, >> >> What's Promiscuous mode? > > Promiscuous (sp?) mode is a special mode of an Ethernet card to receive > all frames on the network instead of just those addressed to it's own > Ethernet address or the broadcast address. > >> Would it make any security problems? > > It's mainly used for traffic sniffers. Programs like tcpdump and trafshow > will put the interface in promiscious mode so they can do their job. If > you don't knw where this came from, be worried about just who has root > access to your box. In fact, promiscuous mode (or, more specifically, how you use it) is less of a security problem to you than it is to everybody else on the net. It enables people to monitor connections which have nothing to do with them. It also means that when you go to meetings like USENIX, you shouldn't connect to your home machine with telnet; somebody on the net might get your password. Greg -- When replying to this message, please copy the original recipients. For more information, see http://www.lemis.com/questions.html See complete headers for address, home page and phone numbers finger grog@lemis.com for PGP public key To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message