From owner-freebsd-questions@FreeBSD.ORG Fri Aug 22 17:52:24 2008 Return-Path: Delivered-To: questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id CD719106566B for ; Fri, 22 Aug 2008 17:52:24 +0000 (UTC) (envelope-from jeffrey@goldmark.org) Received: from out1.smtp.messagingengine.com (out1.smtp.messagingengine.com [66.111.4.25]) by mx1.freebsd.org (Postfix) with ESMTP id A6A9E8FC26 for ; Fri, 22 Aug 2008 17:52:24 +0000 (UTC) (envelope-from jeffrey@goldmark.org) Received: from compute1.internal (compute1.internal [10.202.2.41]) by out1.messagingengine.com (Postfix) with ESMTP id 0D65B15B3B0; Fri, 22 Aug 2008 13:52:24 -0400 (EDT) Received: from heartbeat1.messagingengine.com ([10.202.2.160]) by compute1.internal (MEProxy); Fri, 22 Aug 2008 13:52:24 -0400 X-Sasl-enc: P+F0j19WnyuEQvLWMx2cIFusPePq2Jp6otwnb/iNXFXQ 1219427543 Received: from hagrid.ewd.goldmark.org (n114.ewd.goldmark.org [72.64.118.114]) by mail.messagingengine.com (Postfix) with ESMTPSA id 2892E6CC4; Fri, 22 Aug 2008 13:52:23 -0400 (EDT) Message-Id: <04357C61-7D62-4099-BE0D-781892DABED2@goldmark.org> From: Jeffrey Goldberg To: chris27wjoyner@gmail.com In-Reply-To: <58136.87561.qm@web56713.mail.re3.yahoo.com> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v928.1) Date: Fri, 22 Aug 2008 12:52:21 -0500 References: <58136.87561.qm@web56713.mail.re3.yahoo.com> X-Mailer: Apple Mail (2.928.1) Cc: questions@freebsd.org Subject: Re: Security questions, seeing more then one dhcp client. X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Aug 2008 17:52:24 -0000 On Aug 21, 2008, at 10:38 PM, Christopher Joyner wrote: > I am seeing two dhcp clients connected to my wireless router. Does > that mean someone other then me is on it? Do you have a Wii? Or maybe an iPhone or other similar device? Or a network printer? There is a fair chance that the other client is something that should be there that you've just forgotten about. However, there is also also a reasonable chance that it is a security breach if you are running an unsecured wireless network. What I would recommend is that you probe the unknown device with something like nmap (available from ports security/nmap) with something like nmap -O -sV IP-ADDRESS-OF-MYSTERY-DEVICE That should give you a fair amount of information about the device. Cheers, -j -- Jeffrey Goldberg http://www.goldmark.org/jeff/