Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 19 Apr 2001 06:16:43 -0700
From:      Alfred Perlstein <bright@wintelcom.net>
To:        George.Giles@mcmail.vanderbilt.edu
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: promiscuous mode
Message-ID:  <20010419061643.I976@fw.wintelcom.net>
In-Reply-To: <OF25A75C37.DE5ADC61-ON86256A33.00484906@MC.VANDERBILT.EDU>; from George.Giles@mcmail.vanderbilt.edu on Thu, Apr 19, 2001 at 08:10:45AM -0500
References:  <OF25A75C37.DE5ADC61-ON86256A33.00484906@MC.VANDERBILT.EDU>

next in thread | previous in thread | raw e-mail | index | archive | help
* George.Giles@mcmail.vanderbilt.edu <George.Giles@mcmail.vanderbilt.edu> [010419 06:11] wrote:
> I have a 4.2-RELEASE box that is going into, and out of, promiscuous mode
> on the xl0 interface. What would cause this ? Is it a sign of a potential
> problem ?

If you're the admin and no one else should be running the network
interface in this mode it's a sign of a compromised of security,
mainly that your box may be compromised.  Just make sure you're
not seeing this becasue of things that need promiscuous mode like
dhcpd and various network monitoring tools such as tcpdump.

-- 
-Alfred Perlstein - [alfred@freebsd.org]
Instead of asking why a piece of software is using "1970s technology,"
start asking why software is ignoring 30 years of accumulated wisdom.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010419061643.I976>