Re: How can i find out if someone sniffs my IP-Packets

From: Walter Roberson (roberson_at_ibd.nrc-cnrc.gc.ca)
Date: 01/30/04

  • Next message: Barry Margolin: "Re: How can i find out if someone sniffs my IP-Packets" 
    Date: 29 Jan 2004 23:19:48 GMT

    In article <401991A2.B5A7C35@yahoo.com>,
    Ewald Peters <ewald_peters@yahoo.com> wrote:
    :Do you mean that an interface in promiscious mode can be found in the
    :LAN
    :from an other computer? If yes, how?
    :Or do you just mean that every computer has to be checked manually?

    There have been some programs to check that, yes. If I recall correctly,
    the general idea is that some systems have a difference in the fine
    details of packet refusals depending on whether the packet was
    rejected at a low level or accepted (promiscuous mode) and rejected
    in a higher-layer protocol. 

    -- 
Suppose there was a test you could take that would report whether
you had Free Will or were Pre-Destined. Would you take the test?
  • Next message: Barry Margolin: "Re: How can i find out if someone sniffs my IP-Packets"

    Relevant Pages

    • Possible security issue with FreeBSD 5.4 jailing and BPF
      ... While playing around with FreeBSD 5.4 and jailing I discovered that it was ... and a BPF device is available in the jail ... "The Berkeley Packet Filter provides a raw interface to data link layers ... The ethernet interface of the host is not in promiscious mode. ...
      (Bugtraq)
    • [Full-disclosure] Possible security issue with FreeBSD 5.4 jailing and BPF
      ... While playing around with FreeBSD 5.4 and jailing I discovered that it was ... and a BPF device is available in the jail ... "The Berkeley Packet Filter provides a raw interface to data link layers ... The ethernet interface of the host is not in promiscious mode. ...
      (Full-Disclosure)
    • Re: How can i find out if someone sniffs my IP-Packets
      ... >> In LAN you can only find a network interface that is in a promiscious mode, ... broadcast address, but whose destination MAC address is not the Ethernet ...
      (comp.security.misc)
    • Re: de0 driver bug
      ... > traffic at best unless it is set in promiscious mode. ... > instantly brought the interface and traffic to life, ... > tcpdump all traffic ceased. ... > putting the interface into promisious mode using ifconfig de0 promisc ...
      (freebsd-current)
    • Re: How can i find out if someone sniffs my IP-Packets
      ... >> probably outside in the internet and find out, ... > In LAN you can only find a network interface that is in a promiscious mode, ... Do you mean that an interface in promiscious mode can be found in the ...
      (comp.security.misc)