Snort mailing list archives
AW: Bonding - has anyone gotten it to work with an ether tap
From: "Poppi, Sandro" <Sandro.Poppi () wacker com>
Date: Wed, 29 May 2002 07:23:04 +0200
I've successfully used channel bonding on RH 7.2, kernel 2.4.18 along with ether taps (100Base TX, 1000 Base SX). 2 things to remember: First apply the patch for 2.4.18 from http://sourceforge.net/projects/bonding/ and recompile and install a new kernel, second recompile ifenslave as described in /usr/src/linux/Documentation/networking/bonding.txt. I created 2 small test scripts for my own convenience: bond.sh #!/bin/bash # testing channel bonding for IDS and Taps # poppi, 25.02.2002 /sbin/ifconfig bond0 up /sbin/ifconfig eth1 promisc up /sbin/ifconfig eth2 promisc up /sbin/ifenslave bond0 eth1 /sbin/ifenslave bond0 eth2 unbond.sh #!/bin/bash # testing channel bonding for IDS and Taps # poppi, 25.02.2002 /sbin/ifconfig bond0 down /sbin/ifconfig eth1 down /sbin/ifconfig eth2 down /sbin/rmmod bonding HTH, Sandro
Sort of linked to snort. I have an ether tap and am trying to recombine the 2 streams. Has anyone had any luck with channel bonding (and snorting on that IF) ? I am using the patch from source forge http://sourceforge.net/projects/bonding/ ( and I know I should be asking there, but bear with me) . I have eth0 ( the normal interface) and eth 1+2 ( the interfaces connected to the tap) with out the bonding module loaded up I can see traffic on eth 1+2 as I would expect. as I bring up bond0 I can no longer see traffic on eth1+2 or on bond0. rmmod bonding and I can now tcpdump the real interfaces..... Has anyone gotten bonding working under linux with an ether tap ? BTW this is RH7.1 kernel 2.4.18 Q -- ##################### Quentyn Taylor Sysadmin - Fotango ##################### Lamport's Law: A distributed system is one in which the failure of a computer you didn't even know existed can render your own computer unusable. _______________________________________________________________ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
_______________________________________________________________ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- AW: Bonding - has anyone gotten it to work with an ether tap Poppi, Sandro (May 28)
- alert Mr. F Phat's (May 29)
- Re: AW: Bonding - has anyone gotten it to work with an ether tap quentyn (May 29)