[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: ifconfig doesn't report Promiscuous interfaces



Hi,
 
Are you sure that this machine wasn't compromised ??? 
Usually rootkits replace the ifconfig file with a
version that does not show the promiscous state.
 
Marlon
 
 
> --- "S.Salman Ahmed" <ssahmed@pathcom.com> escreveu:
> >
> 
> > Isn't ifconfig supposed to report if a network
> > interface is in
> > Promiscuous mode ? I thought it was.
> > 
> > I am currently running a sid system with
> > kernel-2.4.2 and the only way
> > I have to check if a network has changed its
> > promiscuous status is to
> > grep through /var/log/kern.log. ifconfig says
> > nothing about it.
> > 
> > Can anyone else confirm that this is a bug in
> > ifconfig in sid ?
> > 
> > @phoenix:[/root] dpkg -S `which ifconfig` 
> > net-tools: /sbin/ifconfig
> > @phoenix:[/root] dpkg -l|grep net-tools
> > ii  net-tools      1.58-2         The NET-3
> > networking toolkit
> > @phoenix:[/root] uname -a
> > Linux phoenix 2.4.2 #3 Sat Feb 24 13:14:50 EST
> 2001
> > i686 unknown
> > 
> > 
> > -- 
> > Salman Ahmed
> > ssahmed AT pathcom DOT com
> > 
> > 
> > --  
> > To UNSUBSCRIBE, email to
> > debian-security-request@lists.debian.org
> > with a subject of "unsubscribe". Trouble? Contact
> > listmaster@lists.debian.org
> >  
> 
> 
>
________________________________________________________________________
> O YAHOO! GEOCITIES CHEGOU AO BRASIL!
> Crie sua home page com tudo em português -
> http://br.geocities.com
> 
> 
> --  
> To UNSUBSCRIBE, email to
> debian-security-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact
> listmaster@lists.debian.org
>  


________________________________________________________________________
O YAHOO! GEOCITIES CHEGOU AO BRASIL!
Crie sua home page com tudo em português - http://br.geocities.com



Reply to: