Snort mailing list archives

Re: Promiscuouls Mode Question


From: Jim Kipp <jkipp5 () home com>
Date: Mon, 03 Sep 2001 08:12:23 -0400



Fyodor wrote:

On Sun, Sep 02, 2001 at 12:12:49PM -0400, Jim Kipp wrote:
If I run snort or tcpdump(on eth0), then do ifconfig -a eth0, it does
not report PROMISC. Only when I manually set promisc does it report it.
But tcpdump seems to be sniffing everything.  Is this normal?

Are you sure noone replaced your ifconfig with something funky? ;p

According to tripwire..no! also I just reinstalled it from the CD. 
SO I think it is the real thing. 

Thanks

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: