[Snort-devel] check for promiscious mode needed ?

From: Andreas Wurzinger <andreas.wurzinger(at)salt-ag.com>
Date: Wed Apr 23 2003 - 06:40:48 EDT

Hi all,

last week I had the phenomenon that snort died and as I tried to restart him it always came up properly but didn't detect anything. After doing some diagnosis on snort I discovered that when snort was not running the nic was in promiscious mode and when snort came up the card switched over to "normal mode" leaving the promiscious state.

Is it possible that there's a little check needed in snort to proove wether the promiscious mode on the sensor nic is already enabled or not ?

Thanx

Andreas Wurzinger

---

Andreas Wurzinger
- System- und Netzwerkadministration / IT-Sicherheit -

SALT AG
Sedanstrasse 23
97082 Würzburg

Telefon: +49.931.3573.400
Telefax: +49.931.3573.509

mailto:andreas.wurzinger@salt-ag.com
http://www.salt-ag.com

---

transport logistic München
20. - 24. Mai 2003
Sie finden SALT in Halle B4, Stand 201/302

---

This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven.
http://thinkgeek.com/sf

---

Snort-devel mailing list
Snort-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-devel Received on Wed Apr 23 10:23:10 2003