Interface settings - noarp, promisc...

[Subba Rao <subba9 () home com>]

Hello,

I have 2 questions.

1. Is there any advantage by setting the sniffing interface (without IP address)
   with NOARP and PROMISC settings?

2. With NOARP set, the system interfaces would not be broadcasting it's ARP
   addresses, so wouldn't this setting make that interface hard to spoof?

Thank you for any info.
-- 

Subba Rao
subba9 () home com
http://members.home.net/subba9/

GPG public key ID 27FC9217
Key fingerprint = 2B4C 498E 1860 5A2B 6570  5852 7527 882A 27FC 9217

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users