Re: promisc mode with pcap

[Chris Reining <creining () packetfu org>]

<snip>
>       the newer versions use PF_PACKET sockets, on 2.2 and later
>       kernels, and with those, there's a better way of turning
>       promiscuous mode on and off, but it sets a flag that ifconfig
>       *doesn't* show.

However, the iproute2 tool suite by Alexey Kuznetsov and installed on
many linux distros *will* show promisc mode when ifconfig does not. Try
this:

# ip link show <interface>

Chris
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe