Randy Groves wrote:
>
> Anybody know how to run an hme (Fast Ethernet) interface on Solaris in
> 'silent' mode - with no IP address allocated, or in 'DOWN' mode? Both
> tcpdump and snoop on this machine will work just fine if the interface has
> an address and is up. But when the interface doesn't have an address, or
> is down, both snoop and tcpdump will work just fine the first time after a
> reboot, but any subsequent attempts result in a non-promiscuous session,
> even though snoop at least CLAIMS that it is listening promiscuously. Or
> is this a bug in the Solaris implementation?
I don't tell you how to run the interface down or with no IP, but you can do
the following things (where x and y are some random octets that don't conflict
with the rest of your network):
/usr/sbin/ifconfig hme0 plumb
/usr/sbin/ifconfig hme0 192.168.x.y
/usr/sbin/ifconfig hme0 -arp -xmit
/usr/sbin/ifconfig hme0 up
That will enable the interface but disable arp and transmit on it. If you want
to do better, put IP Filter on the machine and block all incoming traffic to
192.168.x.y. Or wait for Casper Dik to give you a real answer... ;^)
--
Jefferson Ogata <[EMAIL PROTECTED]> National Oceanographic Data Center
You can't step into the same river twice. -- Herakleitos
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
