Re: Interface promiscuity obscurity in Linux

[Paul Starzetz <paul () starzetz de>]

Ricardo Branco wrote:

> This affects Linux 2.2 and 2.4
>
> Using libpcap to put the interface in promiscuous mode, will cause that
> ifconfig(8) doesn't show it!
>  
This is an old issue (noticed this nearly 2 years ago...) but can be 
contributed to 'bad' userspace tools.

> libpcap uses setsockopt(..., SOL_PACKET, PACKET_ADD_MEMBERSHIP, ...) with
> PACKET_MR_PROMISC to set the interface in promiscuous mode.
>  
The interesting thing is that the PF_PACKET sockets are also not 
reported by netstat. Anyway this should be fixed.

/ih