search for: promiscious

This message was sent to bugtraq today: While playing around with FreeBSD 5.4 and jailing I discovered that it was possible to put an ethernet interface into promiscious mode from within the jailed environment, allowing a packetsniffer to gather data not meant for the jailed box. This also affects FreeBSD 5.3 (tested) but not FreeBSD 4.x This can be reproduced on boxes where BPF support is enabled in the kernel and a BPF device is available in the jail (badly con...

Hello, I have been using the bridging facilities provided by Linux (vanilla 2.6.7 SMP with UML skas host patch applied) to bridge a regular physical ethernet network (on interface eth0) with a virtual network (on interface tap0, cf uml_switch, http://user-mode-linux.sourceforge.net/networking.html). A couple of virtual machines (run using user-mode linux, a tool that enables you to run linux

Hi Everyone, In order to prevent DomU from entering promiscuous mode, is it just a matter of adding these 2 rules when the vif is created? # Accept packets leaving the bridge going to the domU only if # the destination IP for that packet matches an authorized IPv4 # address for that domU. iptables -A FORWARD -m physdev --physdev-out vif1.0 \ --destination 216.146.46.43 -j ACCEPT

Re hello list ! I''m using XEN 3.0.3 with 3 VM in bridge mode. I would like to use route mode to ''remove'' the promiscious mode. How can i do that? I have tried to comment (vif-script vif-bridge) and (network-script multi-bridge) and uncomment (vif-script vif-route) (network script-network-route) but it doesn''t work ! ANd what about (network nat) ! Do i''ve to use it? Thanks for your advice! _...

Hi, I am a beginner of bridge. I have a problem of using Fedora Core 2 to make a simple bridge. Here is my setup: The bridge computer is installed with Fedore Core 2 (with the SE Linux patch). As I know that kernel 2.6.5 is already support bridging by default, so I didn't recompile the kernel. Then I installed bridge-utils-0.9.6-1.i386. And no additional configuration is made. After

Hi there, I'm trying to set up a man-in-the-middle scenario within a VMWare Workstation team, using brctl. What I want is the following: PC1 eth0 >---LAN-segment-1---< eth0 PCMITM eth1 >---LAN-segment-2---< eth0 PC2 Now I did the following on PCMITM (PC man in the middle): ifconfig eth0 down ifconfig eth1 down brctl addbr lnxbr0 brctl addif lnxbr0 eth0 brctl addif lnxbr0 eth1

...+ }, { + .name = "ifname", + .type = QEMU_OPT_STRING, + .help = "interface name", + }, { + .name = "promisc", + .type = QEMU_OPT_BOOL, + .help = "enable promiscious mode at startup", + }, + { /* end of list */ } + }, #ifdef CONFIG_VDE }, { .type = "vde", diff --git a/qemu-options.hx b/qemu-options.hx index bde3e3f..0d5440f 100644 --- a/qemu-options.hx +++ b/qemu-options.hx @@ -825,6 +825,10 @@ DEF(&quo...

...+ }, { + .name = "ifname", + .type = QEMU_OPT_STRING, + .help = "interface name", + }, { + .name = "promisc", + .type = QEMU_OPT_BOOL, + .help = "enable promiscious mode at startup", + }, + { /* end of list */ } + }, #ifdef CONFIG_VDE }, { .type = "vde", diff --git a/qemu-options.hx b/qemu-options.hx index bde3e3f..0d5440f 100644 --- a/qemu-options.hx +++ b/qemu-options.hx @@ -825,6 +825,10 @@ DEF(&quo...

...#39;s nothing returned, never ever. Perhaps there shouldn't be anything returned, or nothing is returned because the packet gets dropped by the target boxes because they're faulty (chksum)? And lastly, what could be the cause of there going no traffic to the samba WINS? The interface is in promiscious mode, so I should most likely see it if it was there :/ I see all kinds of smb traffic flowing around on the other net, and there's a whole bunch of computers in the THCCA workgroup on net 0.. Does anyone have a fine idea of what I should do here? I'm as I said, a bit lost. I'm not sur...