I have servers on a LAN reporting my laptop with a bogus hostname. This is making me suspect a man in the middle attack.
Here are some details:
From an Ubuntu Linux 14.04 laptop, I logged into an Ubuntu server to do some bandwidth monitoring with a tool call jnettop.
jnettop lists all computers connected to the server and how much bandwidth each connection is consuming.
On a debian-based linux you can install jnettop like this:
sudo apt-get install jnettop
And to run jnettop, you type a command specifying the network interface you want to listen on, like this:
sudo jnettop -i eth0
Naturally, one of the connections jnettop listed was my own port 22 connection with the server. It correctly indicated my local ip address, but for my host name it said I was julianm.domain.local; I was expecting it to say myActualHostname.domain.local
As a hostname, "julianm" is definitely not something I recognize and I'm concerned I may be falling victim to a man in the middle attack. What are other explanations as to why jnettop would report an incorrect hostname for its connection with this laptop?
Any advice would be appreciated. Thanks.