Re: promiscuous eth0

2001-03-07 Thread Eric N. Valor
This is really goofy. But I've been able to (at least in my case) narrow the "problem" down to using Xircom cards. The 3Com card that I use in my other Debian laptop works great (switching between the two demonstrates this behavior as well, so it isn't the laptop, and the 3Com card is Cardbu

Re: promiscuous eth0

2001-03-07 Thread Alexander Hvostov
On Mon, 5 Mar 2001, Jaan Sarv wrote: > > Also, paranoid network administrators might be a little upset by it, since > > Linux sends out a frame indicating it is switching into (or out > > of) promiscuous mode. This is possible evidence that you're running a > > sniffer of some kind (such as snort)

Re: promiscuous eth0

2001-03-07 Thread Eric N. Valor
This is really goofy. But I've been able to (at least in my case) narrow the "problem" down to using Xircom cards. The 3Com card that I use in my other Debian laptop works great (switching between the two demonstrates this behavior as well, so it isn't the laptop, and the 3Com card is Cardbu

Re: promiscuous eth0

2001-03-07 Thread Alexander Hvostov
On Mon, 5 Mar 2001, Jaan Sarv wrote: > > Also, paranoid network administrators might be a little upset by it, since > > Linux sends out a frame indicating it is switching into (or out > > of) promiscuous mode. This is possible evidence that you're running a > > sniffer of some kind (such as snort

Re: promiscuous eth0

2001-03-05 Thread Peter Cordes
On Mon, Mar 05, 2001 at 09:51:07AM -0800, Jeff Coppock wrote: > Hi, > > Turning on Multicast works. I like this better than turning on promiscuous. > I need to figure out why this isn't turning on automagically at startup. If > multicast is not set in the kernel, will that cause this? Makes

Re: promiscuous eth0

2001-03-05 Thread Peter Cordes
On Mon, Mar 05, 2001 at 09:51:07AM -0800, Jeff Coppock wrote: > Hi, > > Turning on Multicast works. I like this better than turning on promiscuous. I need >to figure out why this isn't turning on automagically at startup. If multicast is >not set in the kernel, will that cause this? Makes s

Re: promiscuous eth0

2001-03-05 Thread Jeff Coppock
Hi, Turning on Multicast works. I like this better than turning on promiscuous. I need to figure out why this isn't turning on automagically at startup. If multicast is not set in the kernel, will that cause this? Makes sense to me. jc On Fri, Mar 02, 2001 at 10:01:06PM +0100, Kristian F.

Re: promiscuous eth0

2001-03-05 Thread Jeff Coppock
Hi, Turning on Multicast works. I like this better than turning on promiscuous. I need to figure out why this isn't turning on automagically at startup. If multicast is not set in the kernel, will that cause this? Makes sense to me. jc On Fri, Mar 02, 2001 at 10:01:06PM +0100, Kristian F.

Re: promiscuous eth0

2001-03-05 Thread Jaan Sarv
> Also, paranoid network administrators might be a little upset by it, since > Linux sends out a frame indicating it is switching into (or out > of) promiscuous mode. This is possible evidence that you're running a > sniffer of some kind (such as snort). Hi, How can I recognize such frames/packet

Re: promiscuous eth0

2001-03-04 Thread Jaan Sarv
> Also, paranoid network administrators might be a little upset by it, since > Linux sends out a frame indicating it is switching into (or out > of) promiscuous mode. This is possible evidence that you're running a > sniffer of some kind (such as snort). Hi, How can I recognize such frames/packe

Re: promiscuous eth0

2001-03-03 Thread Orlando Padilla
Snort by default sets your interface card to promiscuous mode. You can verify this by looking at 'ifconfig' output. eth0 Link encap:Ethernet HWaddr 00:E0:7D:79:01:25 inet addr:XX.XX.XX.XX Bcast:255.255.255.255 Mask:255.255.254.0 UP BROADCAST RUNNING PROMISC MTU:1500

Re: promiscuous eth0

2001-03-03 Thread Orlando Padilla
Snort by default sets your interface card to promiscuous mode. You can verify this by looking at 'ifconfig' output. eth0 Link encap:Ethernet HWaddr 00:E0:7D:79:01:25 inet addr:XX.XX.XX.XX Bcast:255.255.255.255 Mask:255.255.254.0 UP BROADCAST RUNNING PROMISC MTU:1500

Re: promiscuous eth0

2001-03-03 Thread Louis Poncet
- Original Message - From: Jeff Coppock <[EMAIL PROTECTED]> To: debian security list Sent: Friday, March 02, 2001 8:05 PM Subject: promiscuous eth0 > I recently install snort on my laptop to check it out and now my pcmcia network card will pass IP only when snort is runnin

Re: promiscuous eth0

2001-03-03 Thread Louis Poncet
- Original Message - From: Jeff Coppock <[EMAIL PROTECTED]> To: debian security list <[EMAIL PROTECTED]> Sent: Friday, March 02, 2001 8:05 PM Subject: promiscuous eth0 > I recently install snort on my laptop to check it out and now my pcmcia network card will pass IP onl

Re: promiscuous eth0

2001-03-02 Thread Kristian F. Høgh
Hi Jeff. My pcmcia netcard also don't work when i switch on my laptop. When i type ifconfig it prints: UP BROADCAST RUNNING then I enable multicast (ifconfig eth0 multicast) It works and ifconfig prints UP BROADCAST RUNNING MULTICAST Kristian F. Høgh. Jeff Coppock wrote: > I recently install s

Re: promiscuous eth0

2001-03-02 Thread Alexander Hvostov
Jeff, It can potentially slow your machine down somewhat, as now the kernel has to handle each and every frame transmitted on the network eth0 is attached to, rather than only the ones addressed to your machine and broadcasts. Quite a lot of load if your system isn't addressed much on a high-traff

promiscuous eth0

2001-03-02 Thread Jeff Coppock
I recently install snort on my laptop to check it out and now my pcmcia network card will pass IP only when snort is running (daemon mode or not), or I have to put my network card in promiscuous mode [#ifconfig eth0 -promisc]. I can't find any configuration that is obvious to me that would cause

Re: promiscuous eth0

2001-03-02 Thread Kristian F. Høgh
Hi Jeff. My pcmcia netcard also don't work when i switch on my laptop. When i type ifconfig it prints: UP BROADCAST RUNNING then I enable multicast (ifconfig eth0 multicast) It works and ifconfig prints UP BROADCAST RUNNING MULTICAST Kristian F. Høgh. Jeff Coppock wrote: > I recently install

Re: promiscuous eth0

2001-03-02 Thread Alexander Hvostov
Jeff, It can potentially slow your machine down somewhat, as now the kernel has to handle each and every frame transmitted on the network eth0 is attached to, rather than only the ones addressed to your machine and broadcasts. Quite a lot of load if your system isn't addressed much on a high-traf

promiscuous eth0

2001-03-02 Thread Jeff Coppock
I recently install snort on my laptop to check it out and now my pcmcia network card will pass IP only when snort is running (daemon mode or not), or I have to put my network card in promiscuous mode [#ifconfig eth0 -promisc]. I can't find any configuration that is obvious to me that would caus