Ive never dabbled with tcpdump..so im not sure. The LRK readme mentioned the following: ifconfig Trojaned! Hide sniffing do an ifconfig..see if it reports that the card is in promiscuous mode (it will be quite obvious..) if it does.. thats possibly a good thing.. if it doesnt.. a LRK has probably been installed At 01:09 PM 12/13/1999 +0100, Mirek Szymczak wrote:

First of all thank you all for the prompt answer. Can't this mean something else? recently i was playing around with tcpdump can't this be the reason? Mirek