LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 02-22-2005, 06:32 PM   #1
AvatarofVirgo
Member
 
Registered: Dec 2004
Posts: 50

Rep: Reputation: 15
Question Promiscuous Mode: Yes or No?


I installed SNORT and I was wondering what promiscuous mode does and what's it purpose and if I should turn it on.
 
Old 02-22-2005, 06:56 PM   #2
Capt_Caveman
Senior Member
 
Registered: Mar 2003
Distribution: Fedora
Posts: 3,658

Rep: Reputation: 57
Makes Snort listen for all traffic on the wire, rather than traffic specifically addressed to or from the Snort box. If you're using Snort as a sensor or in a network rather than protecting a single system, then you'd want promiscuous mode turned on.
 
Old 02-22-2005, 07:06 PM   #3
AvatarofVirgo
Member
 
Registered: Dec 2004
Posts: 50

Original Poster
Rep: Reputation: 15
I have it running on a home computer with no network connected to the net with a dialup. So I guess I'll leave that mode off. But what would happen if I turned it on, does it make any difference if I turn it on when I don't need it?
 
Old 02-22-2005, 07:22 PM   #4
Capt_Caveman
Senior Member
 
Registered: Mar 2003
Distribution: Fedora
Posts: 3,658

Rep: Reputation: 57
Quote:
Originally posted by AvatarofVirgo
I have it running on a home computer with no network connected to the net with a dialup. So I guess I'll leave that mode off. But what would happen if I turned it on, does it make any difference if I turn it on when I don't need it?
On a system with a cable connection, you might capture traffic from other hosts on your portion of the ISPs network, but on a dialup or DSL line where you aren't sharing a connection it shouldn't make a difference.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
promiscuous mode question zsoltrenyi Linux - Networking 2 01-25-2005 05:57 AM
eth0 promiscuous mode? emetib Linux - Networking 9 08-26-2004 06:51 PM
How Do I switch to promiscuous mode? 0din Linux - Newbie 1 03-05-2004 12:34 PM
promiscuous mode of eth santoshbhise Linux - Newbie 1 02-01-2002 09:58 AM
eth0 promiscuous mode susx Linux - Networking 11 09-22-2001 12:39 AM


All times are GMT -5. The time now is 08:00 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration