Re: Non dropping packet monitor

2006-03-24 Thread Charles Swiger
On Mar 24, 2006, at 5:46 PM, Paul Haddad wrote: I need to monitor packets flowing in/out of a freebsd 6.x box in a tcpdump/pcap (monitor only) style but I can't have packets dropped as tcpdump often does when its buffer fills up. I'm fine if the entire network connection slows down because of th

Non dropping packet monitor

2006-03-24 Thread Paul Haddad
Hi All, I need to monitor packets flowing in/out of a freebsd 6.x box in a tcpdump/pcap (monitor only) style but I can't have packets dropped as tcpdump often does when its buffer fills up. I'm fine if the entire network connection slows down because of this, the important thing is that I can get

Problems - page fault in kernel, whilst running dhclient

2006-03-24 Thread Josef Karthauser
Hi guys, My laptop is running: 6.1-PRERELEASE FreeBSD 6.1-PRERELEASE #30: Thu Mar 23 09:04:30 GMT 2006 Recently something went belly up, and now when I run 'dhclient em0' on the primary interface after a 'acpiconf -s 3' / resume cycle the machine panics. Here's the backtrace: (kgdb) bt #0 doad

Re: How do you keep users from stealing other user's ip??

2006-03-24 Thread Atanas Yankov
Port security will help you when you want to ensure that particular mac address is enter switch on particular port but not prevent user to change ip address , statics arp is the most stupid part that most administrators does becouse router never send arp request to see are this device are there

Re: How do you keep users from stealing other user's ip??

2006-03-24 Thread Duane Whitty
Eygene Ryabinkin wrote: To prevent users from MAC-spoofing - buy a switch with some kind of "port-security". If you could lock down a port to just one MAC and have a static ARP on the router it would be pretty hard to spoof the MAC-address. With another MAC than the one associated with the port

Re: How do you keep users from stealing other user's ip??

2006-03-24 Thread Eygene Ryabinkin
> But you wont get any traffic if the FDB on the switch is locked down. > > Example: > MAC AddressPortType > -- -- > 00-04-75-71-AE-22 11 Dynamic > > > If you lock down so that only MAC 00-04-75-71-AE-22 could be associated with >

Re: How do you keep users from stealing other user's ip??

2006-03-24 Thread Eygene Ryabinkin
> To prevent users from MAC-spoofing - buy a switch with some kind of > "port-security". If you could lock down a port to just one MAC and have a > static ARP on the router it would be pretty hard to spoof the MAC-address. > With > another MAC than the one associated with the port you simply wi

Re: How do you keep users from stealing other user's ip??

2006-03-24 Thread Jon Otterholm
Sten Daniel Sørsdal wrote: Mark Jayson Alvarez wrote: Good day, We are trying to reorganize our local area network and I need some tips on how you are managing your own lan... We have a vanilla pc router with interface facing our private lan and interface facing the Internet. One pr

Re: How do you keep users from stealing other user's ip??

2006-03-24 Thread Sten Daniel Sørsdal
Mark Jayson Alvarez wrote: Good day, We are trying to reorganize our local area network and I need some tips on how you are managing your own lan... We have a vanilla pc router with interface facing our private lan and interface facing the Internet. One problem which we are experiencin