Re: OT: promiscuous mode problems

[Detmar Liesen <counter.spy () gmx de>]

Hmmm, problem solved but I am not sure how and why.
I have switched off the dhcp client, now everything works.

I also have now configured the interfaces to come up at boot time statically
with no IP address. 

However, the interfaces were not configured for dhcp in the first place, so
this does not explain why the ifconfig ethx up promisc command did not work.

Any ideas?

Thanks,
Detmar

---------original message------------

Hi,
maybe someone will be able to help me with a problem:

I am trying to merge two network interfaces (eth1 and eth2) of a compaq
netelligent dual nic (using the tlan driver) for sniffing both up- and
downstream
off a shomiti network tap.

This can be done via the bonding and ifenslave linux features.

The bonding works okay, but I have encountered problems firing up the two
interfaces in promiscuous mode.

ifconfig eth1 up promisc
ifconfig eth2 up promisc

When I do this and try sniffing with tcpdump first on eth1, then on eth2, I
don't see any packets.

Funny thing is, when I once start iptraf with "force promiscuous" then I see
packets floating over the screen. After having done this, I can see the
packets in tcpdump as well.

Seems to me that there is some prob with the ifconfig command.

I am using SuSE 8.0.

Any ideas and suggestions will be greatly appreciated.

TIA,
Detmar

-- 
GMX - Die Kommunikationsplattform im Internet.
http://www.gmx.net



-- 
GMX - Die Kommunikationsplattform im Internet.
http://www.gmx.net



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users