Robert Woodcock wrote:
> On Sat, Nov 25, 2006 at 07:40:20PM -0800, David Liontooth wrote:
>   
>> It's good to see you're still here! I'd like the functionality of the
>> programs, but in their current shape they consistently crash and leave
>> your machine vulnerable. Anyway, the decision is yours.
>>     
>
> Do they leave your machine any more vulnerable than if you had left one of
> the tools (or tcpdump, or ethereal/wireshark, or ngrep, etc) running for an
> extended period of time?
>   
No, they do not. The difference is that the programs in netdiag
routinely crash, leaving your machine in a vulnerable state with no
warning and indefinitely, while a program that runs properly is know to
create a vulnerable state and exits promiscuous mode when it exits.
> If so, please state how.
>
> If not, I plan to lower this bug's severity and merge it with the existing
> bugs.
>   
If there are platforms where the programs still run, they are indeed
useful. If you decide to keep it in Debian without fixing it, I suggest
you add a warning.

Dave



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to