Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 15 Nov 2001 16:00:43 -0600
From:      Alfred Perlstein <bright@mu.org>
To:        Landon Stewart <landons@uniserve.com>
Cc:        security@FreeBSD.ORG
Subject:   Re: unusual  log in var/log/messages
Message-ID:  <20011115160043.W13393@elvis.mu.org>
In-Reply-To: <5.1.0.14.0.20011115135330.02d6fcf8@pop.uniserve.com>; from landons@uniserve.com on Thu, Nov 15, 2001 at 01:53:34PM -0800
References:  <5.1.0.14.0.20011115135330.02d6fcf8@pop.uniserve.com>

next in thread | previous in thread | raw e-mail | index | archive | help
* Landon Stewart <landons@uniserve.com> [011115 15:53] wrote:
> Actually, isn't this typical behaviour of a host with a NIC in promiscuous 
> mode?  Someone could be running a sniffer on 00:40:33:39:80:d1 and it 
> responded to a ping that was sent to 137.226.141.33.
> 
> Is this probable?

Only if the sniffer is really stupid.  A sniffer is a data sink,
it should not be replying unless it's not a sniffer.

-- 
-Alfred Perlstein [alfred@freebsd.org]

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011115160043.W13393>