OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 1st quarter (Jan-Mar) 1995: snooper watchers

snooper watchers

Ben Taylor (bentsnm.com)
Wed, 22 Feb 1995 12:35:55 -0500 (EST) 

I'm doing some work for a client who has had some suggestions that they
run a program to watch the state of ifconfig, and send mail if the
interface ever goes promiscuous.  This works just fine under SunOS 4.x,
however, their concern is that this does not appear to work for Solaris 2.x.
I have noticed that snoop in promiscuous mode does not affect the 
status from ifconfig, so the current method for looking for a 
promiscuous interface wont do them any good.  I'll be looking into
this, but I figured I'd ask here to see if anyone has done something
like this.  (I haven't seen a snooper for 2.x like the SunOS one, but with
tools like snoop, I assume that one is in the works someplace.)


Thanks,
Ben
--
Ben Taylor --- Chief Information Officer --- Smoke N' Mirrors, Inc.
-=-=-=-=-=-=-=-  Services for Systems Integration -=-=-=-=-=-=-=-=-
bentsnm.com  "Where the impossible jobs get done!"  (703) 318-1440
           580 Herndon Pkwy, Suite 300, Herndon VA, 22070