Subject: Re: a remote user can check promiscuous mode
To: None <tech-net@netbsd.org>
From: der Mouse <mouse@Rodents.Montreal.QC.CA>
List: tech-net
Date: 12/10/1999 22:32:18
> http://www.l0pht.com/antisniff/tech-paper.html claims that a remote
> user can examine that whether a interface of NetBSD machine is
> promiscuous mode or not.

> Is this bug?

If it were true, it would, as other people have said, be a bug.  But
the simple techniques described for AntiSniff don't work against even
vaguely modern NetBSD; indeed, I discovered this myself recently when I
had to make a NetBSD machine respond to packets for its IP address but
not its MAC address (unusual circumstances) - I had to comment out a
few lines in the relevant Ethernet driver.

					der Mouse

			       mouse@rodents.montreal.qc.ca
		     7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B