From owner-freebsd-net Fri Dec 31 5:35:17 1999 Delivered-To: freebsd-net@freebsd.org Received: from tango.SoftHome.net (tango.SoftHome.net [204.144.231.49]) by hub.freebsd.org (Postfix) with SMTP id C864214C3D for ; Fri, 31 Dec 1999 05:35:14 -0800 (PST) (envelope-from fgont@softhome.net) Received: (qmail 8239 invoked by uid 417); 31 Dec 1999 13:35:21 -0000 Received: from unknown (HELO over) (200.51.58.188) by smtpa.softhome.net with SMTP; 31 Dec 1999 13:35:21 -0000 Message-Id: <.19991231001314.009e7780@pop.softhome.net> X-Sender: fgont@pop.softhome.net X-Mailer: QUALCOMM Windows Eudora Pro Version 4.2.0.58 Date: Fri, 31 Dec 1999 00:19:14 -0300 To: DRHAGER@de.ibm.com From: Fernando Ariel Gont Subject: Re: ARP makes a LAN "vulnerable"? Cc: freebsd-net@FreeBSD.ORG In-Reply-To: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org At 13:15 30/12/1999 +0100, DRHAGER@de.ibm.com wrote: >So what? >You can always see all the traffic on your segment. >Try tcpdump, snoop, iptrace..... Sorry, I thought that there were some ways to don't let tcpdump see the packets.... :( >If you have two identical adresses on the MAC -Layer, you will run in a What's the MAC-layer???? >real problem, so such a thing will be noticed on the net. I didn't mean to have two machines with the same address. I meant that I could use ARP so that the IP address of a given host is translated to the hardware address of MY host. In that way, the packets that someone wants to send to the former host, would go to MY host, instead... Regards, Fernando Ariel Gont E-mail: fgont@softhome.net web site: http://members.xoom.com/gont/ --- "Con las computadoras crearemos una civilizacion de estupidos tecnologicos, y una elite se ira quedando con todo. Cuando digo elite me refiero a gente como yo, que puede leer." - Ray Bradbury, escritor To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message