Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 15 Feb 1999 15:25:29 -0500
From:      "Louis A. Mamakos" <louie@TransSys.COM>
To:        Barney Wolff <barney@databus.com>
Cc:        freebsd-net@FreeBSD.ORG
Subject:   Re: Router stats & NIC in prom. mode... 
Message-ID:  <199902152025.PAA74395@whizzo.transsys.com>
In-Reply-To: Your message of "Mon, 15 Feb 1999 14:31:00 EST." <36c877540.71db@databus.databus.com> 
References:  <36c877540.71db@databus.databus.com> 

next in thread | previous in thread | raw e-mail | index | archive | help
> Send a packet to the IP of the suspect machine, with a "wrong" MAC.
> If it answers, it's snooping.  Not surefire, of course, but probably
> works unless the bad guy has altered the net code.  Clipping the xmit
> lead is harder than it used to be.

Hmm.. it's really unclear to me that this is a case worth trying to 
detect.  You could just not give the network interface an IP address, and
still use BPF on it.

louie


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199902152025.PAA74395>