Re: Linux and switch problem???

[twig les <twigles () yahoo com>]

What kind of switch?  What did you change in the
sewitch config for this project?  What else is the
Linux box doing?  Simply putting an interface into
promiscious mode can't affect a switch.  If you've
spanned a Cisco 29xx or 35xx, then you may be in
trouble, but make sure you aren't being scapegoated. 
That's happened to me before ("Your sniffer is slowing
the network down!!" <huh?>)


--- Daniel Curry <dcurry () corio com> wrote:
>      I have configure my eth1 as following.
> eth1      Link encap:Ethernet  HWaddr
> 00:50:8B:E3:99:7C  
>           UP BROADCAST RUNNING PROMISC MULTICAST 
> MTU:1500  Metric:1
>           RX packets:0 errors:0 dropped:0 overruns:0
> frame:0
>           TX packets:0 errors:0 dropped:0 overruns:0
> carrier:0
>           collisions:0 txqueuelen:100 
>           RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)
>           Interrupt:11 Base address:0xc000 
>
>
> However I am getting reports from our network folks
> that "this is 
> bringing the switch down?"
>
>
>   My ifcg-eth1 file looks like this.
> DEVICE=eth1
> BOOTPROTO=static
> ONBOOT=yes
>
>  Is there anything wrong with my configuration? 
>
> Please reply directly. I received snort email via
> "digest" mode.
>
> Thank you.
> -- 
> Daniel Curry
> PGP AD5A 96DC 7556 A020 B8E7  0E4D 5D5E 9BA5 C83E
8C92> begin:vcard 
> n:Curry;Daniel
> tel;fax:650-232-3200
> tel;work:650-232-4006
> x-mozilla-html:FALSE
> url:www.corio.com
> org:Corio Inc
> adr:;;959 Skyway Road  Suite 100;San
> Carlos;California;94070;USA
> version:2.1
> email;internet:dcurry () corio com
> title:Sr. Information Security Eng.
> x-mozilla-cpt:;-5312
> fn:Daniel Curry
> end:vcard


=====
-----------------------------------------------------------
All warfare is based on deception.
-----------------------------------------------------------

__________________________________________________
Do You Yahoo!?
Yahoo! Autos - Get free new car price quotes
http://autos.yahoo.com


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users