Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 10 Dec 2001 12:17:57 -0500 (EST)
From:      Ralph Huntington <rjh@mohawk.net>
To:        Sander van Dinten <sander@joek.dnsq.org>
Cc:        <freebsd-security@FreeBSD.ORG>
Subject:   RE: promiscuous mode
Message-ID:  <20011210121632.D59192-100000@mohegan.mohawk.net>
In-Reply-To: <000701c1819d$26f0fa20$0301a8c0@sanderpc>

next in thread | previous in thread | raw e-mail | index | archive | help
No, there is no network sniffer running on that box (or any other on the
local network-- at least that I know of, and I should know). How can I
determine if someone has slipped on in?

On Mon, 10 Dec 2001, Sander van Dinten wrote:

> Are you using some kind of an network sniffer?
>
> Promiscuous will say that your network card picks up all network
> packages (which means it will not only pick up the packages for your
> IP-address).
>
> -----Original Message-----
> From: owner-freebsd-security@FreeBSD.ORG
> [mailto:owner-freebsd-security@FreeBSD.ORG] On Behalf Of Ralph
> Huntington
> Sent: Monday, December 10, 2001 6:04 PM
> To: freebsd-security@FreeBSD.ORG
> Subject: promiscuous mode
>
> I recently found these log entries:
>
> messages.2:Dec  6 13:45:35 mohawk /kernel: fxp0: promiscuous mode
> enabled
> messages.2:Dec  6 13:46:31 mohawk /kernel: fxp0: promiscuous mode
> disabled
> messages.2:Dec  6 13:47:53 mohawk /kernel: fxp0: promiscuous mode
> enabled
> messages.2:Dec  6 13:51:00 mohawk /kernel: fxp0: promiscuous mode
> disabled
> messages.2:Dec  6 13:51:00 mohawk /kernel: fxp0: promiscuous mode
> enabled
> messages.2:Dec  6 13:55:42 mohawk /kernel: fxp0: promiscuous mode
> disabled
>
> Can someone tell me how this mode might be enabled/disabled? We have
> very
> few shell users on this machine and I didn't think any of them would
> know
> anything about promiscuous mode. Turns out I know little about it
> myself.
>
> Any pointers to relevant docs and/or some idea of what this might be
> about
> would be very much appreciated. Thank you in advance.	- Ralph
>
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011210121632.D59192-100000>