running snort in promiscuous mode

[Jan Hormann <hormann () gutenberg-rz de>]

Hello,

I have a little problem running snort in promiscuous mode. If I start snort 
with the option "-vde" an path for config file and logpath, snort switch the 
ethernet device in promiscuous mode but leave this mode a few seconds later, 
so that snort don't run in promiscuous mode.
If I start aditionally snort with "-v" (as second snort prozess) it runs fine 
and both snort prozesses use promiscuous mode.

My configuration is snort version 2.0.1 on SuSE 9 on a intelbased machine. 
Ethernet interface is a 3com card. 
I have this problem on two machines (diferent ethernet devices). 

Is this problem depending on the version of snort? Does anybody know the 
problem? Is there anybody how have a solution for this problem?

On solution I found on the internet was to change the source code, I hope this 
isn't the only solution.

Thanks

Jan



-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users