snort error

[amin Salehi <seyedamin_salehi () yahoo com>]

hi.my virtual topology is:vmware workstation 9-all os is linux backtrack5R3. 

i run the following commands:
VM-2: ping 10.10.8.2 -c 2
VM-1: snort -q -v -l /var/snort/log
VM-3:routing and bridging is disabled.promisc mode is enabled on 2 interfaces

the resault is:


why VM-2 sniff these ping probes?


then i run the following command on VM-3(snort sensor host):
snort -q -c /etc/snort/snort.conf -Q --daq afpacket -i eth0:eth1 -A console(#afpacket act as a hop)

and
snort -q -v -l /var/log/snort on VM-1
and
ping 10.10.8.2 -c 2 on VM-2
when i look at the log file on VM-1 i see 2698 recored is logged:


2 sample record is:



seem that afpacket couse a loop between eth0 and eth1 in VM-3.why this is happend?

------------------------------------------------------------------------------
Monitor your physical, virtual and cloud infrastructure from a single
web console. Get in-depth insight into apps, servers, databases, vmware,
SAP, cloud infrastructure, etc. Download 30-day Free Trial.
Pricing starts from $795 for 25 servers or applications!
http://p.sf.net/sfu/zoho_dev2dev_nov

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!