Subject: Re: a remote user can check promiscuous mode
To: Noriyuki Soda <soda@sra.co.jp>
From: Michael Richardson <mcr@sandelman.ottawa.on.ca>
List: tech-net
Date: 12/10/1999 13:31:30
>>>>> "Noriyuki" == Noriyuki Soda <soda@sra.co.jp> writes:
Noriyuki> http://www.l0pht.com/antisniff/tech-paper.html claims that a remote user
Noriyuki> can examine that whether a interface of NetBSD machine is promiscuous
Noriyuki> mode or not.
The technique is to send an ICMP ping addressed to the node at the IP
layer, but not addressed to the node at the ethernet layer.
] Out and about in Ottawa. hmmm... beer. | firewalls [
] Michael Richardson, Sandelman Software Works, Ottawa, ON |net architect[
] mcr@sandelman.ottawa.on.ca http://www.sandelman.ottawa.on.ca/ |device driver[
] panic("Just another NetBSD/notebook using, kernel hacking, security guy"); [