Hi, It can mean that your eth0 is configured to check all packets that passes through, most often is that to see if there is unecessary network traffic. Promiscuous mode is enabled/disabled via ifconfig. This command shows you the interface status: ip addr show dev eth0 Some tools here if you want to sniff the sniffers: http://www.linuxjournal.com/article.php?sid=5343 http://www.linuxjournal.com/article.php?sid=5201 Regards, Jostein

===== Original Message From Thomas Nyman ===== Hi Susers

I just checked my log and noticed the following

"...eth0: Promicous mode enabled ... eth0: device eth0 entered promiscous mode ..eth0: device eth0 left promiscous mode"

inbetween entered and left promiscous mode I can see that a client has accessed his pop account.

Anyone have any clues what this mean? Have I been hacked?

Thomas

-- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com