Snort mailing list archives

Re: Is there some problem w/ 3Com cards?


From: Kiira Triea <kiira-t () mail bsasinc org>
Date: Fri, 13 Jul 2001 07:23:43 -0400 (EDT)


Hi, 


A friend tells me 3Com cards have some problems - like dropping 
all malformed packets. I have bought a 3Com 3C900 XL because 
it is a PCI card and it has an AUI port. Anyone ever have any 
problems with this or cards like 3C509 and snort? 

Your friend is mostly correct. The majority of current NIC cards have
low-level logic built into the integrated circuits to "inspect"
incoming packets, and if that packet is corrupted, it will be dropped.
In most NIC cards, those dropped packets are not counted by any
sort of management logic, and promiscous mode has absolutely
nothing to do with whether you can "see" those damaged ethernet
packets or not.

Ok, that was the main point or question I am not so sure of - whether 
any of this affected promiscuous mode ability of the card. Thanks for
the help!

Kiira 


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: