LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 01-13-2003, 02:09 AM   #1
unixpirate
Member
 
Registered: Oct 2002
Location: Maryland
Distribution: RedHat 7.3
Posts: 44

Rep: Reputation: 15
Angry Promiscuous


Hi all,
I'm running RH 7.3, on an 1850R w/ 2 nics, using snortsnarf.
eth0 is my sniffer in Promiscuous mode.
I also set eth1 also to Promisc, which is connected to the internal/external net and not a good idea to be in promisc mode.
I turned it off, "ifconfig eth1 -promisc" but it seems to reactivate on it's own. I check the /var/log/messages and see it.
Any ideas?
Thanks,
J
 
Old 01-13-2003, 06:06 AM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
3 possibilities AFAIK:
- you're running Snort w/o the "-p" flag or another app like tcpdump,
- grep /etc/sysconfg/network-scripts/ifcfg-eth? -e "PROMISC", if it says PROMISC="yes" you know what to change,
- there's another sniffer installed by someone else.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Iptables in promiscuous mode Barzan Linux - Networking 3 10-23-2005 07:24 AM
wlan promiscuous mode paulr1984 Linux - Wireless Networking 0 05-13-2005 09:52 AM
Promiscuous Mode: Yes or No? AvatarofVirgo Linux - Security 3 02-22-2005 07:22 PM
promiscuous networking pe2338 Debian 7 08-29-2003 06:19 AM
eth0 promiscuous mode susx Linux - Networking 11 09-22-2001 12:39 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 10:17 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration