From owner-freebsd-security Wed Dec 8 0:26:32 1999 Delivered-To: freebsd-security@freebsd.org Received: from imaging.rug.ac.be (imaging.rug.ac.be [157.193.133.14]) by hub.freebsd.org (Postfix) with ESMTP id 9E6A814EBD for ; Wed, 8 Dec 1999 00:26:28 -0800 (PST) (envelope-from Tony.Voet@rug.ac.be) Received: from rug.ac.be (tvoet.mri [157.193.90.71]) by imaging.rug.ac.be (8.9.3/8.9.3) with ESMTP id JAA88588; Wed, 8 Dec 1999 09:26:25 +0100 (CET) (envelope-from Tony.Voet@rug.ac.be) Message-ID: <384E1629.D70C4569@rug.ac.be> Date: Wed, 08 Dec 1999 09:26:17 +0100 From: Tony Voet Organization: Gent University - Radiology X-Mailer: Mozilla 4.61 [en] (X11; I; SunOS 4.1.3_U1 sun4m) X-Accept-Language: nl, en, fr, de MIME-Version: 1.0 To: Matt Gostick Cc: freebsd-security@FreeBSD.ORG Subject: Re: ethernet promiscuous mode. References: Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Matt Gostick wrote: > > It is my understanding that promiscuous mode is used for sniffers > so they can capture all packets... Is there any other reason why > my ethernet card would go into promiscuous mode without root (me) > telling it to? Or is it more probable that someone hacked root > and is sniffing other machines on the network from my box? DHCP and advanced port scanners can put your NIC in promiscuous mode too. Best regards, Tony Voet Radiology and Medical Imaging Phone: +32 9 240 4073 Gent University Fax: +32 9 240 4969 De Pintelaan 185 mailto:Tony.Voet@rug.ac.be 9000 Gent http://mri2-gw00.rug.ac.be/ Belgium To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message