LinuxSA Mailing list archives

  From: Adam Hawes <adam.hawes@flinders.edu.au>
  To  : Richard Russell <richard@yellowgoanna.com>
  Date: Mon, 21 Jul 2003 15:10:22 +0930

Re: anyone heard of b00ts?

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Su to root before you run netstat.  The process name may be helpful.

> raw        0      0 *:icmp                  *:*                     7
> -

Vmware does something like this on the box. 

> raw        0      0 *:tcp                   *:*                     7

This looks like a packet sniffer.  Can you use ifconfig (and other tools) to 
find out if the net card is in promiscuous mode?

Adam

- -- 
Adam Hawes
Ph.D Student
School of Engineering
Flinders University

ICQ:    2492016
Email:  adam.hawes@flinders.edu.au
Mobile: 0402 854 965

http://users.esc.net.au/~ahawes/bcc.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQE/G3zPCSL3TthtjkERAkXTAJ9AtuWcUUhIGZTXLdQjAmVtiK6UGwCdH7wr
qmJvgAJSn9d0nZHsdVq6Z0c=
=A43q
-----END PGP SIGNATURE-----

-- 
LinuxSA WWW: http://www.linuxsa.org.au/ IRC: #linuxsa on irc.freenode.net
To unsubscribe from the LinuxSA list:
  mail linuxsa-request@linuxsa.org.au with "unsubscribe" as the subject