Snort mailing list archives

Re: Promiscuouls Mode Question


From: Sten "\"s10\"" at Home <sten () ipjam com>
Date: Sun, 02 Sep 2001 18:27:09 +0200

Jim,

I have seen the same thing on some machines.
Some nic's do not switch to promisc mode properly.

I changed the snort startup script. I added extra
command after snort invocation:
  ifconfig eth0 promisc
that works.

grtz,
Sten

Jim Kipp wrote:

If I run snort or tcpdump(on eth0), then do ifconfig -a eth0, it does
not report PROMISC. Only when I manually set promisc does it report it.
But tcpdump seems to be sniffing everything.  Is this normal?

Thanks,
Jim

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

-- 

=- To spoof or not to spoof, that is the packet -=

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: