Date: Mon, 10 Dec 2001 18:22:15 +0100 From: "Sander van Dinten" <sander@joek.dnsq.org> To: "'Ralph Huntington'" <rjh@mohawk.net> Cc: <freebsd-security@FreeBSD.ORG> Subject: RE: promiscuous mode Message-ID: <000801c1819f$36a9b7c0$0301a8c0@sanderpc> In-Reply-To: <20011210121632.D59192-100000@mohegan.mohawk.net>
next in thread | previous in thread | raw e-mail | index | archive | help
By issueing the command "last |more" and see if you see odd logins -----Original Message----- From: Ralph Huntington [mailto:rjh@mohawk.net] Sent: Monday, December 10, 2001 6:18 PM To: Sander van Dinten Cc: freebsd-security@FreeBSD.ORG Subject: RE: promiscuous mode No, there is no network sniffer running on that box (or any other on the local network-- at least that I know of, and I should know). How can I determine if someone has slipped on in? On Mon, 10 Dec 2001, Sander van Dinten wrote: > Are you using some kind of an network sniffer? > > Promiscuous will say that your network card picks up all network > packages (which means it will not only pick up the packages for your > IP-address). > > -----Original Message----- > From: owner-freebsd-security@FreeBSD.ORG > [mailto:owner-freebsd-security@FreeBSD.ORG] On Behalf Of Ralph > Huntington > Sent: Monday, December 10, 2001 6:04 PM > To: freebsd-security@FreeBSD.ORG > Subject: promiscuous mode > > I recently found these log entries: > > messages.2:Dec 6 13:45:35 mohawk /kernel: fxp0: promiscuous mode > enabled > messages.2:Dec 6 13:46:31 mohawk /kernel: fxp0: promiscuous mode > disabled > messages.2:Dec 6 13:47:53 mohawk /kernel: fxp0: promiscuous mode > enabled > messages.2:Dec 6 13:51:00 mohawk /kernel: fxp0: promiscuous mode > disabled > messages.2:Dec 6 13:51:00 mohawk /kernel: fxp0: promiscuous mode > enabled > messages.2:Dec 6 13:55:42 mohawk /kernel: fxp0: promiscuous mode > disabled > > Can someone tell me how this mode might be enabled/disabled? We have > very > few shell users on this machine and I didn't think any of them would > know > anything about promiscuous mode. Turns out I know little about it > myself. > > Any pointers to relevant docs and/or some idea of what this might be > about > would be very much appreciated. Thank you in advance. - Ralph > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?000801c1819f$36a9b7c0$0301a8c0>