Thank you so much for your replies! This makes much more sense now. I am currently running Snort. I will examine its documentation to see if promiscuous mode is really necessary. In the meantime, am I correct in assuming the only threat is from local users? If so, currently all users are trusted so I shant panic just yet.
Thank you again for your help! -- Aaron Dalton http://aaron.daltons.ca _______________________________________________ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"