nanog mailing list archives
Re: Some very strange network behaviors
From: Crist Clark <crist.clark () globalstar com>
Date: Thu, 11 Sep 2003 13:35:37 -0700
Mike Lewinski wrote:
Christopher Bird wrote:This seems strange to me since they are arriving at an IP address that is different from mine.That's the function of a hub, and the reason why you don't ever want to send out sensitive information in plaintext. Your neighbor in the next room over could run a packet sniffer and capture your logins.
Yes and no. On a broadcast network, like Ethernet, you expect to see traffic for other hosts. The issue here is that it looks like the traffic for these other hosts was getting delivered to Christopher's link-layer address. If he kicks his NIC into promiscuous mode and sees all of this traffic with a sniffer, then this is expected. That's the scenario you highlight. If, OTOH, he's sitting there and traffic for other IP addresses is getting delivered to his NIC with the NIC's MAC address in there, something strange is going on. Unless he has his NIC switched to promiscuous mode and the OS's IP stack is misbehaving badly, Zone Alarm should not see the traffic on the LAN that does not have his MAC address on it. How would a switch/router be deciding that these other IP addresses should go to his PC's NIC (MAC address)? -- Crist J. Clark crist.clark () globalstar com Globalstar Communications (408) 933-4387
Current thread:
- Cisco IOS Failure due to Virus Richard J . Sears (Sep 10)
- Re: Cisco IOS Failure due to Virus Robert Blayzor (Sep 10)
- Re: Cisco IOS Failure due to Virus Richard J . Sears (Sep 10)
- Some very strange network behaviors Christopher Bird (Sep 10)
- Re: Some very strange network behaviors Stephen J. Wilcox (Sep 11)
- Re: Some very strange network behaviors Mike Lewinski (Sep 11)
- Re: Some very strange network behaviors Crist Clark (Sep 11)
- Re: Cisco IOS Failure due to Virus Robert Blayzor (Sep 10)
- Re: Cisco IOS Failure due to Virus Stephen J. Wilcox (Sep 11)
- Re: Cisco IOS Failure due to Virus Petri Helenius (Sep 12)
- Re: Cisco IOS Failure due to Virus Stephen J. Wilcox (Sep 12)
- Re: Cisco IOS Failure due to Virus Petri Helenius (Sep 12)
- <Possible follow-ups>
- RE: Cisco IOS Failure due to Virus Niaz, Wajahat (Sep 10)
- RE: Cisco IOS Failure due to Virus Mark Segal (Sep 15)
- RE: Cisco IOS Failure due to Virus Mark Segal (Sep 15)