Date: Mon, 10 Dec 2001 11:21:31 -0600 (CST) From: Troy Corbin <troyc@titan.communitech.net> To: Ralph Huntington <rjh@mohawk.net> Cc: Sander van Dinten <sander@joek.dnsq.org>, freebsd-security@FreeBSD.ORG Subject: RE: promiscuous mode Message-ID: <Pine.LNX.4.10.10112101121060.29059-100000@titan.communitech.net> In-Reply-To: <20011210121632.D59192-100000@mohegan.mohawk.net>
next in thread | previous in thread | raw e-mail | index | archive | help
maybe one of your shell users ran tcpdump? -t On Mon, 10 Dec 2001, Ralph Huntington wrote: > No, there is no network sniffer running on that box (or any other on the > local network-- at least that I know of, and I should know). How can I > determine if someone has slipped on in? > > On Mon, 10 Dec 2001, Sander van Dinten wrote: > > > Are you using some kind of an network sniffer? > > > > Promiscuous will say that your network card picks up all network > > packages (which means it will not only pick up the packages for your > > IP-address). > > > > -----Original Message----- > > From: owner-freebsd-security@FreeBSD.ORG > > [mailto:owner-freebsd-security@FreeBSD.ORG] On Behalf Of Ralph > > Huntington > > Sent: Monday, December 10, 2001 6:04 PM > > To: freebsd-security@FreeBSD.ORG > > Subject: promiscuous mode > > > > I recently found these log entries: > > > > messages.2:Dec 6 13:45:35 mohawk /kernel: fxp0: promiscuous mode > > enabled > > messages.2:Dec 6 13:46:31 mohawk /kernel: fxp0: promiscuous mode > > disabled > > messages.2:Dec 6 13:47:53 mohawk /kernel: fxp0: promiscuous mode > > enabled > > messages.2:Dec 6 13:51:00 mohawk /kernel: fxp0: promiscuous mode > > disabled > > messages.2:Dec 6 13:51:00 mohawk /kernel: fxp0: promiscuous mode > > enabled > > messages.2:Dec 6 13:55:42 mohawk /kernel: fxp0: promiscuous mode > > disabled > > > > Can someone tell me how this mode might be enabled/disabled? We have > > very > > few shell users on this machine and I didn't think any of them would > > know > > anything about promiscuous mode. Turns out I know little about it > > myself. > > > > Any pointers to relevant docs and/or some idea of what this might be > > about > > would be very much appreciated. Thank you in advance. - Ralph > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-security" in the body of the message > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.LNX.4.10.10112101121060.29059-100000>