On Fri, 15 Mar 2002 14:05:11 +0100, Michael Stauber <[EMAIL PROTECTED]> wrote:
[snip] :>Yes. Sometimes the network cards remain in promiscuous mode even after the :>application that switched 'em to that mode have ended. :> :>Example: running "tcpdump -i eth0 -n" for instance will start a console based :>network sniffer. Interrupt it by pressing CTRL+C, wait a moment and then :>start chkrootkit. It will report that the network card is still in :>promiscuous mode, even though tcpdump has already been stopped. What exactly is promiscuous mode? Why does a program such as tcpdump turn on promiscuous mode? Once the network card is in promiscuous mode, how does one turn it off (reboot)? Thanks for the education. -- Mike _______________________________________________ cobalt-security mailing list [EMAIL PROTECTED] http://list.cobalt.com/mailman/listinfo/cobalt-security
