I've had to manually switch eth0 into (and out of) promiscuous mode under Linux on 
occasion as tcpdump, ethereal and snort failed to effect that (despite running as 
root).

Jason Brown wrote:
>No, it's all hubs.  Some of the hubs have 2 port bridges built in, but I put
>the sniffer on the same hub as the Internet connection, therefore I should
>see everything.

_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls

Reply via email to