Snort mailing list archives
RE: e100 promisc mode
From: "Peter Param" <pparam () stvincents com au>
Date: Mon, 04 Nov 2002 08:28:28 +1100
Hey Jack, Ben Feinstein gave me this URL that provided a driver that worked well for me: http://www.intel.com/support/network/adapter/1000/linux/e100.htm Like yourself I was using the Compaq driver without much success. cheers Peter
Jack Lyons <jack.lyons () martinagency com> 11/02/02 00:38 AM >>>
Related issue, I have having problems getting the e100 driver going in full-duplex. I have tried editing modules.conf and added options, but it doesn't seem to work. It is redhat 7.3 on Compaq server Thanks. -----Original Message----- From: Peter Param [mailto:pparam () stvincents com au] Sent: Thursday, October 31, 2002 4:55 PM To: snort-users () lists sourceforge net Subject: [Snort-users] e100 promisc mode Hi all, Recently installed Snort 1.9 on linux 2.4.7-10. I had to get the latest e100 driver (2.1.6) from Compaq to get it working on the machine with an inbuilt NIC. The card works but not in promisc mode. Doing a "ifconfig eth0 promisc" makes it look like its working in promiscuous mode but really it isn't. I confirmed this by running tcpdump alongside snort...only sees broadcasts. Another machine (an ibook with ver10) on the same segment (same hub etc) running tcpdump also, confirms that it can see all frames. I'm stumped!...any ideas?? cheers Peter ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been virus scanned and although no viruses were detected by the system, St Vincent's Hospital accepts no liability for any consequential damage resulting from email containing any computer viruses. ********************************************************************** ------------------------------------------------------- This sf.net email is sponsored by: Influence the future of Java(TM) technology. Join the Java Community Process(SM) (JCP(SM)) program now. http://ads.sourceforge.net/cgi-bin/redirect.pl?sunm0004en _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users This email and its contents may be confidential. If it is and you are not the intended recipient, please do not disclose or use the information within this email or its attachments. If you have received this email in error, please delete it immediately. Thank you. ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been virus scanned and although no viruses were detected by the system, St Vincent's Hospital accepts no liability for any consequential damage resulting from email containing any computer viruses. ********************************************************************** ------------------------------------------------------- This SF.net email is sponsored by: ApacheCon, November 18-21 in Las Vegas (supported by COMDEX), the only Apache event to be fully supported by the ASF. http://www.apachecon.com _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- e100 promisc mode Peter Param (Oct 31)
- Re: e100 promisc mode twig les (Oct 31)
- Re: e100 promisc mode Ben Feinstein (Oct 31)
- <Possible follow-ups>
- Re: e100 promisc mode Peter Param (Oct 31)
- Re: e100 promisc mode twig les (Oct 31)
- RE: e100 promisc mode Peter Param (Nov 03)
- Re: e100 promisc mode twig les (Oct 31)