"plumbing" and interface

From: Fulton L. Preston Jr. (fulton@prestons.org)
Date: 09/09/01 

Subject: "plumbing" and interface
Date: Sat, 8 Sep 2001 23:45:03 -0400
Message-ID: <3179DF0B7849B34282C430E5F4F9ED1B34D0@MAIL.prestons.org>
From: "Fulton L. Preston Jr." <fulton@prestons.org>
To: <FOCUS-SUN@securityfocus.com>

Hi All,

Simple question, been answered before but the search on
securityfocus.com is down. I need to enabled an interface on a quad
ethernet interface (qe0) to be in promiscuous mode, but with ARP
disabled.

The device isn't important (qe0), but the syntax of the command is.

ifconfig -d qe0 -I_FORGET -SOME_COMMAND_TO_IGNORE_ARP

I just need snort to listen on an interface with NO IP, and it should
not acknowledge requests as being in prom mode.

Thanks in advance.

Fulton.

Relevant Pages

  • Re: Has my webserver been hacked?
    ... > server and install, then take the suspicious drive to a standalone box ... immediately switched off promiscuous mode for that interface. ... So I'm pretty sure no cron job or other stealthy ...
    (comp.os.linux.security)
  • RE: IDS Sensor operation
    ... ability to send packets out at layer 2, bypassing the need for an IP ... Subject: IDS Sensor operation ... An interface in promiscuous mode can still have an IP address. ...
    (Focus-IDS)
  • Re: Setting Network Interface Flags
    ... > I need to find out if an interface is running in promiscuous mode. ... the handling of the IFF_PROMISC and IFF_ALLMULTI flags is broken ... The flags value returned by SIOCGIFFLAGS is the value set by ...
    (comp.os.linux.development.system)
  • Re: Setting Network Interface Flags
    ... > I need to find out if an interface is running in promiscuous mode. ... the handling of the IFF_PROMISC and IFF_ALLMULTI flags is broken ... The flags value returned by SIOCGIFFLAGS is the value set by ...
    (comp.os.linux.networking)
  • Re: Setting Network Interface Flags
    ... > I need to find out if an interface is running in promiscuous mode. ... the handling of the IFF_PROMISC and IFF_ALLMULTI flags is broken ... The flags value returned by SIOCGIFFLAGS is the value set by ...
    (comp.os.linux.development.apps)