Subject: Re: a remote user can check promiscuous mode
To: Noriyuki Soda <soda@sra.co.jp>
From: Michael Richardson <mcr@sandelman.ottawa.on.ca>
List: tech-net
Date: 12/10/1999 13:31:30
>>>>> "Noriyuki" == Noriyuki Soda <soda@sra.co.jp> writes:
    Noriyuki> http://www.l0pht.com/antisniff/tech-paper.html claims that a remote user
    Noriyuki> can examine that whether a interface of NetBSD machine is promiscuous
    Noriyuki> mode or not.

  The technique is to send an ICMP ping addressed to the node at the IP
layer, but not addressed to the node at the ethernet layer.

]      Out and about in Ottawa.    hmmm... beer.                |  firewalls  [
]   Michael Richardson, Sandelman Software Works, Ottawa, ON    |net architect[
] mcr@sandelman.ottawa.on.ca http://www.sandelman.ottawa.on.ca/ |device driver[
] panic("Just another NetBSD/notebook using, kernel hacking, security guy");  [