Re: Promiscuous mode on SUN running Solaris 8

["John Creegan" <jcreegan () questarweb com>]

In doing a bit more research, "snoop" reports that it's using /dev/hme
in promiscuous mode, and I'm tempted to believe it.  While many packets
appear to be either multicasted or broadcasted, not all packets state
this.

While snoop is running, I run "ifconfig -a", and all I see are the
loopback, hme0 and hme1 devices... none of which are shown to be in
promiscuous mode.

About an hour ago, I wrote:
> In reading through the archives, I *should* be able to set
promiscuous
> mode by using "ifconfig hme0 promisc".  However, that doesn't work...
> and the ifconfig man page doesn't contain the word promiscuous.
>
> I'm off to the SUN HCL to make certain the internal interface is
> capable.  If not, the PCI card should be, and since this is only a
100M
> net, It'll do... though I'd prefer to use the internal interface for
> sniffing.



This message (including any attachments) contains confidential 
information intended for a specific individual and purpose, 
and is protected by law.  If you are not the intended recipient,
you should delete this message and are hereby notified that any 
disclosure,copying, or distribution of this message, or the taking 
of any action based on it, is strictly prohibited.



-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users