LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Networking (https://www.linuxquestions.org/questions/linux-networking-3/)
-   -   eth0 is enabled in promiscous mode (https://www.linuxquestions.org/questions/linux-networking-3/eth0-is-enabled-in-promiscous-mode-23391/)

saravanan1979 06-14-2002 01:53 AM

eth0 is enabled in promiscous mode
 
Hello
My ethernet card has been enabled in promiscous mode by an hacker how can i turn it off and bring it to the normal mode.
Regards
Saravanan

DavidPhillips 06-14-2002 12:13 PM

what's the card?

saravanan1979 06-15-2002 12:13 AM

Ethernet card maeans my network card

DMR 06-15-2002 03:28 AM

Quote:

Originally posted by saravanan1979
Ethernet card maeans my network card
What David meant, I believe, is: what is the make and model of your card. The way one enables/disables promisc. mode can depend on the chipset of the card.

What makes you so sure that a hacker did this in the first place?

saravanan1979 06-15-2002 03:38 AM

Model of my card is Reasltek rtl8139.My system has been hacked for the past 1 week and my ISP has confirmed this,and there has been a login id with root access created in /etc/passwd file.

DavidPhillips 06-15-2002 07:37 AM

It looks like the rx mode is set by the driver, have you rebuilt the module? is it using a module? if not then you may need to rebuild the kernel

saravanan1979 06-15-2002 07:50 AM

yes it is using it as a module no probs it can recogonise the network card.The only problem was another module eth0:0 was running in the machine it had a global IP and a Diffrent subnet mast so when i use ifconfig i could see

Lo
eth0
eth0:0
Known i used ifconfig eth0:0 <ip> subnetmask<> down and resdtarted my network.Know etherner card started in normal mode!!!!!!!!!!!!!

saravanan1979 06-15-2002 07:51 AM

By the way can u tell me how to reduild the kernel,eager to know

DavidPhillips 06-15-2002 08:01 AM

yea looks like a virtual lan was setup on it.

there are some kernel howto's that explain how to build a kernel in detail

MasterC 06-15-2002 08:24 AM

Sweet, you got hacked! I invite people to hack me. In fact if I had a static IP I would post it here so people could hack me. I don't exactly have anything on my computer that they would really want anyway. Just some good ol Videos and a few songs, no bank account crap or anything good. Besides, I figure I can hopefully figure out how they'd do it, and apply it. Like the VLAN on your system, I want to allow my buddy who lives about 3 miles away to be able to "connect" to my PC. I figure if a hacker can do it, why can't my buddy? And things like that.

Cool

<edit>
Right here is an excellent example of a kernel how to. I copied it from a search I did. That link is curteousy of PBHarris.
</edit>

saravanan1979 06-15-2002 08:50 AM

Actually My setup was such that we had a Router connected in a network in which the Linux machine was and any request coming on port 80 was redirected to the Linux machine via router.So please can u tell me what this virtual LAN is,i have heard of virtual network but what is this virtual Lan??any tutorials regarding this..

DavidPhillips 06-15-2002 09:01 AM

basically it will allow one card to act as two, in the sense that it would have two ip addresses and may occupy two networks. It is mostly used when you want to restrict certain machines access to certain resources and allow others to access other resources, with only one nic.


All times are GMT -5. The time now is 09:32 PM.