From owner-freebsd-questions@FreeBSD.ORG  Mon Aug 16 12:21:59 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 10A6616A4CE
	for <freebsd-questions@freebsd.org>;
	Mon, 16 Aug 2004 12:21:59 +0000 (GMT)
Received: from ei.bzerk.org (ei.xs4all.nl [213.84.67.5])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 18F3D43D4C
	for <freebsd-questions@freebsd.org>;
	Mon, 16 Aug 2004 12:21:56 +0000 (GMT)
	(envelope-from mail25@bzerk.org)
Received: from ei.bzerk.org (BOFH@localhost [127.0.0.1])
	by ei.bzerk.org (8.12.10/8.12.10) with ESMTP id i7GCO1WA081291;
	Mon, 16 Aug 2004 14:24:01 +0200 (CEST)
	(envelope-from mail25@bzerk.org)
Received: (from bulk@localhost)
	by ei.bzerk.org (8.12.10/8.12.10/Submit) id i7GCO0YD081290;
	Mon, 16 Aug 2004 14:24:00 +0200 (CEST)
	(envelope-from mail25@bzerk.org)
Date: Mon, 16 Aug 2004 14:24:00 +0200
From: Ruben de Groot <mail25@bzerk.org>
To: Kevin Stevens <freebsd@pursued-with.net>
Message-ID: <20040816122400.GA81160@ei.bzerk.org>
Mail-Followup-To: Ruben de Groot <mail25@bzerk.org>,
	Kevin Stevens <freebsd@pursued-with.net>,
	Bill Moran <wmoran@potentialtech.com>,
	Remko Lodder <remko@elvandar.org>, freebsd-questions@freebsd.org
References: <200408151429.05110.aaron@daltons.ca>
	<20040815170806.45fcb779.wmoran@potentialtech.com>
	<200408151603.26022.aaron@daltons.ca> <411FE2E9.1090704@elvandar.org>
	<20040815183205.66b753cd.wmoran@potentialtech.com>
	<688492D4-EF2F-11D8-9CD1-000A959CEE6A@pursued-with.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <688492D4-EF2F-11D8-9CD1-000A959CEE6A@pursued-with.net>
User-Agent: Mutt/1.4.2.1i
cc: Remko Lodder <remko@elvandar.org>
cc: Bill Moran <wmoran@potentialtech.com>
cc: freebsd-questions@freebsd.org
Subject: Re: Is promiscuous mode bad?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 16 Aug 2004 12:21:59 -0000

On Sun, Aug 15, 2004 at 07:53:10PM -0700, Kevin Stevens typed:
> 
> A lot of network scanners also trigger on NICS in promiscuous mode 
> (there's a way to detect them, I forget the details at the moment) 
> because admins want to know if any hosts are out there sniffing.

How sure are you about that? AFAIK there's no way to detect a NIC in 
promiscuous mode *from the outside*. I would be very interested in a network
scanner that could.

Ruben