[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-security] chkrootkit output, what does it mean?
- Subject: Re: [cobalt-security] chkrootkit output, what does it mean?
- From: Michael Stauber <cobalt@xxxxxxxxxxxxxx>
- Date: Fri, 15 Mar 2002 16:09:31 +0100
- Organization: Stauber Multimedia Design
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
Hi Mike,
> What exactly is promiscuous mode? Why does a program such as tcpdump turn
> on promiscuous mode?
The full explanation on that issue is best looked up on sources like this one:
http://wwwinfo.cern.ch/pdp/ose/security/cern/service/promisc.html
The short answer:
Usually Network Interface Cards (NIC) are configured by operating systems to
listen to only packets directed to them. It is always possible however
configure them to listen to all packets circulating into the local area
network (LAN). This configuration is called Promiscuous Mode (PM)
To enable promiscuous mode: /sbin/ifconfig -i eth0 promisc
To disable promiscuous mode: /sbin/ifconfig -i eth0 -promisc
--
With best regards,
Michael Stauber
mstauber@xxxxxxxxxxxxxx
Unix/Linux Support Engineer