Security Incidents mailing list archives

Re: ANOTHER DNS MAC ADDRESS Change w/h Unix Log File

From: dugsong () MONKEY ORG (Dug Song)
Date: Sat, 22 Jan 2000 21:10:47 -0500


On Sat, 22 Jan 2000, CyberPsychotic wrote:

Arp games in your LAN is a good sign that you've got some hostile people
in there (could be that some machine(s) got compromiced, or just your
co-workers aren't as friendly as they seem :-))


arp spoofing is often used to sniff off a switch. see arpredirect:

        http://www.monkey.org/~dugsong/dsniff/

-d.

---
http://www.monkey.org/~dugsong/

Current thread:

Unusual scan pattern Russell Fulton (Jan 18)
- ANOTHER DNS MAC ADDRESS Change w/h Unix Log File Michael Vaughan (Jan 19)
  - Re: ANOTHER DNS MAC ADDRESS Change w/h Unix Log File Cy Schubert - ITSD Open Systems Group (Jan 21)
  - Re: ANOTHER DNS MAC ADDRESS Change w/h Unix Log File Ex Machina [xm] (Jan 21)
  - Re: ANOTHER DNS MAC ADDRESS Change w/h Unix Log File CyberPsychotic (Jan 21)
    - Re: ANOTHER DNS MAC ADDRESS Change w/h Unix Log File Dug Song (Jan 22)
- Re: Unusual scan pattern Granquist, Lamont (Jan 19)
- Slow scan Mixmaster (Jan 19)
- Re: Unusual scan pattern Richard Bejtlich (Jan 20)
- Re: Unusual scan pattern Kevin Houle (Jan 20)
  - Re: Unusual scan pattern Russell Fulton (Jan 23)
  - semi careful, very patient attacker Jon Paul, Nollmann (Jan 24)
- <Possible follow-ups>
- Re: Unusual scan pattern Oliver Friedrichs (Jan 19)
  - Unknown Port Numbers Edwin Covert (Jan 21)