Snort mailing list archives

RE: ifconfig may not correctly show promiscuous mode under linux


From: Paul Schmehl <pauls () utdallas edu>
Date: Fri, 15 Aug 2003 20:10:33 -0500

--On Friday, August 15, 2003 5:30 PM -0400 Gordon Cunningham <gacunningham () bellsouth net> wrote:

        ifconfig eth1 up promisc

in my startup for each additional interface and things were fine.  I'm
running RedHat 8.0 with patches, 4 snort sessions, and 8 barnyard sessions
on this test unit.  Ifconfig properly showed me the interfaces were NOT in
promiscuous mode when I brought them up without the "promisc" on the
ifconfig command line and then started snort.

Apparently, your mileage may vary.

promisc is deprecated according to the docs. ifconfig eth1 up should be sufficient, with no additional parameters.

Paul Schmehl (pauls () utdallas edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu


-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: