OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: just running tcpdump makes promisc mode?

From: John Madden (weezfreelists.org)
Date: Thu Jun 24 2004 - 08:11:45 CDT


> But I can't find PROMISC message when I execute ifconfig while tcpdump or
> snort.

ifconfig is notorious for not knowing reporting the promisc status correctly.
Use "ip link show" instead.

John

--
# John Madden weezfreelists.org
# MailandFiles.com: Your mail, your files: http://www.mailandfiles.com
# FreeLists: Free mailing lists for all: http://www.freelists.org
# Linux, Apache, Perl and C: All the best things in life are free!