[96365] in RedHat Linux List
Re: Filtering by Ethernet HW address?
daemon@ATHENA.MIT.EDU (Jose M. Sanchez)
Mon Oct 26 16:28:50 1998
Reply-To: "Jose M. Sanchez" <opjose@ex-pressnet.com>
From: "Jose M. Sanchez" <opjose@ex-pressnet.com>
To: <redhat-list@redhat.com>
Cc: <myer@mail.elanco.k12.pa.us>
Date: Mon, 26 Oct 1998 15:12:11 -0500
Resent-From: redhat-list@redhat.com
-----Original Message-----
From: Kevin M. Myer <myer@mail.elanco.k12.pa.us>
To: redhat-list@redhat.com <redhat-list@redhat.com>
Date: Monday, October 26, 1998 3:34 PM
Subject: Filtering by Ethernet HW address?
>Hi,
>
>I recently inherited the job of net cop for our school district. There
>are certain people who are obviously violating our "Fair Use Internet
>Policy" and I've managed to obtain several MAC's in this case Ethernet
>hardware addresses. However, I don't know whose machines these are (aside
>from what I can deduce from the vendor's database of ethernet hardware
>addresses - they're Power Mac's with PCI buses, but that describes about
>400 of our machines here...).
>
>Is there any software for Linux that will allow me to filter based on
>ethernet hardware address so that I can figure out what traffic is going
>to and from these particular machines?
>
Boy can you ever!
Linux has a rather amazing array of PD/Freeware packet sniffers, tcpdumpers,
etc...
I have been able to debug and locate misconfigured machines at my ISP using
these tools!
If the Linux box is the router then you can really exert a high degree of
control.
Check the rufus archives for iptraf, trafshow, karpinski, netshow...
and if your Linux machine IS the router, check out... ip_masq and
ip_accounting faqs & howtos in the docs directories..
-JMS
--
PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
http://www.redhat.com http://archive.redhat.com
To unsubscribe: mail redhat-list-request@redhat.com with
"unsubscribe" as the Subject.
