Date: Mon, 10 Dec 2001 12:24:43 -0500 (EST) From: Ralph Huntington <rjh@mohawk.net> To: Troy Corbin <troyc@titan.communitech.net> Cc: Sander van Dinten <sander@joek.dnsq.org>, <freebsd-security@FreeBSD.ORG> Subject: RE: promiscuous mode Message-ID: <20011210122359.H59192-100000@mohegan.mohawk.net> In-Reply-To: <Pine.LNX.4.10.10112101121060.29059-100000@titan.communitech.net>
next in thread | previous in thread | raw e-mail | index | archive | help
That was it: tcpdump Kind thanks to all who replied. On Mon, 10 Dec 2001, Troy Corbin wrote: > maybe one of your shell users ran tcpdump? > > -t > > On Mon, 10 Dec 2001, Ralph Huntington wrote: > > > No, there is no network sniffer running on that box (or any other on the > > local network-- at least that I know of, and I should know). How can I > > determine if someone has slipped on in? > > > > On Mon, 10 Dec 2001, Sander van Dinten wrote: > > > > > Are you using some kind of an network sniffer? > > > > > > Promiscuous will say that your network card picks up all network > > > packages (which means it will not only pick up the packages for your > > > IP-address). > > > > > > -----Original Message----- > > > From: owner-freebsd-security@FreeBSD.ORG > > > [mailto:owner-freebsd-security@FreeBSD.ORG] On Behalf Of Ralph > > > Huntington > > > Sent: Monday, December 10, 2001 6:04 PM > > > To: freebsd-security@FreeBSD.ORG > > > Subject: promiscuous mode > > > > > > I recently found these log entries: > > > > > > messages.2:Dec 6 13:45:35 mohawk /kernel: fxp0: promiscuous mode > > > enabled > > > messages.2:Dec 6 13:46:31 mohawk /kernel: fxp0: promiscuous mode > > > disabled > > > messages.2:Dec 6 13:47:53 mohawk /kernel: fxp0: promiscuous mode > > > enabled > > > messages.2:Dec 6 13:51:00 mohawk /kernel: fxp0: promiscuous mode > > > disabled > > > messages.2:Dec 6 13:51:00 mohawk /kernel: fxp0: promiscuous mode > > > enabled > > > messages.2:Dec 6 13:55:42 mohawk /kernel: fxp0: promiscuous mode > > > disabled > > > > > > Can someone tell me how this mode might be enabled/disabled? We have > > > very > > > few shell users on this machine and I didn't think any of them would > > > know > > > anything about promiscuous mode. Turns out I know little about it > > > myself. > > > > > > Any pointers to relevant docs and/or some idea of what this might be > > > about > > > would be very much appreciated. Thank you in advance. - Ralph > > > > > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > > with "unsubscribe freebsd-security" in the body of the message > > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-security" in the body of the message > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011210122359.H59192-100000>