you know I have having the same type of issue running Snort. I cant seem to get it to go into promiscuious mode properly. If i do the ifconfig -a the nic says it is in multicast mode so I change that to promiscuious mode and the same thing I can only see traffic with a source or destination address of my that card.
hence no promiscuious mode. weird... maybe it is the nic card? I am using a 3com 509b-c card. I disabled plug and play mode and set up the card via the hardware level itself using pnpdsabl.bat and then I set it up through linux. John -----Original Message----- From: Ethy H. Brito [mailto:[EMAIL PROTECTED]] Sent: Thursday, September 05, 2002 11:26 AM To: [EMAIL PROTECTED] Subject: [tcpdump-workers] promisc mode Dear workers Not sure if this is a tcpdump bug but... If I execute tcpdump against a wireless card (orinoco or wavelan pcmcia or isa) with the -p parameter set, the card still enters promisc mode. ifconfig do not reports it but Kuznetsov's iproute2 does. I have to run tcpdump again without the -p to return the interface to normal operation. -- Ethy H. Brito /"\ InterNexo Ltda. \ / CAMPANHA DA FITA ASCII - CONTRA MAIL HTML +55 (12) 3941-6860 X ASCII RIBBON CAMPAIGN - AGAINST HTML MAIL S.J.Campos - Brasil / \ - This is the TCPDUMP workers list. It is archived at http://www.tcpdump.org/lists/workers/index.html To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe - This is the TCPDUMP workers list. It is archived at http://www.tcpdump.org/lists/workers/index.html To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
