hi ya
if promiscuous mode is "on"... it will be EXPLICTLY listed in your
"ifconfig" results
if it doesnt say "promisc" than promicuous mode is off
ifconfig -v | grep -i promisc
if you get soemthing... promiscuous mode is on
as was stated earlier.. to turn it off
ifconfig eth0 -promisc
c ya
alvin
On Wed, 20 Feb 2002, Gene Lee wrote:
> Redhat 7.2:
> =====================
>
> [root@host root]# netstat -ni
> Kernel Interface table
> Iface MTU Met RX-OK RX-ERR RX-DRP RX-OVR TX-OK TX-ERR TX-DRP TX-OVR
> Flg
> eth0 1500 0314226233 1173 0 0 9995564 0 0 0
> BNRU
> eth1 1500 0 7811328 0 0 012792753 0 0 0
> BMRU
> lo 16436 0 22327 0 0 0 22327 0 0 0
> LRU
>
> [root@host root]# ifconfig eth0
> eth0 Link encap:Ethernet HWaddr xx:xx:xx:xx:xx:xx
> inet addr:x.x.x.x Bcast:x.x.x.x Mask:x.x.x.x
> UP BROADCAST NOTRAILERS RUNNING MTU:1500 Metric:1
> RX packets:314230887 errors:1173 dropped:0 overruns:0 frame:1175
> TX packets:9995564 errors:0 dropped:0 overruns:0 carrier:287
> collisions:253666 txqueuelen:100
> RX bytes:3521351619 (3358.2 Mb) TX bytes:974809983 (929.6 Mb)
> Interrupt:11 Base address:0xec80
>
> [root@host root]# ifconfig eth1
> eth1 Link encap:Ethernet HWaddr xx:xx:xx:xx:xx:xx
> inet addr:x.x.x.x Bcast:x.x.x.x Mask:x.x.x.x
> UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
> RX packets:7811347 errors:0 dropped:0 overruns:0 frame:211
> TX packets:12792770 errors:0 dropped:0 overruns:0 carrier:0
> collisions:7685 txqueuelen:100
> RX bytes:765919399 (730.4 Mb) TX bytes:4245711745 (4049.0 Mb)
> Interrupt:3 Base address:0x300
>
> [root@host root]# ifconfig lo
> lo Link encap:Local Loopback
> inet addr:127.0.0.1 Mask:255.0.0.0
> UP LOOPBACK RUNNING MTU:16436 Metric:1
> RX packets:22327 errors:0 dropped:0 overruns:0 frame:0
> TX packets:22327 errors:0 dropped:0 overruns:0 carrier:0
> collisions:0 txqueuelen:0
> RX bytes:2037519 (1.9 Mb) TX bytes:2037519 (1.9 Mb)
>
> =====================
>
> eth0:
> netstat -i ="BNRU"
> ifconfig eth0 = "UP BROADCAST NOTRAILERS RUNNING"
> eth1:
> netstat -i="BMRU"
> ifconfig eth1 = "UP BROADCAST MULTICAST RUNNING"
> lo
> netstat -i="LRU"
> ifconfig lo = "UP LOOPBACK RUNNING"
>
> Draw your own conclusions.
>
> --
> Gene Lee
> [EMAIL PROTECTED]
> [EMAIL PROTECTED]
> ----- Original Message -----
> From: "Bruno Negr�o" <[EMAIL PROTECTED]>
> To: "Gene Lee" <[EMAIL PROTECTED]>
> Cc: <[EMAIL PROTECTED]>
> Sent: Wednesday, February 20, 2002 4:21 PM
> Subject: Re: netstat -i shows promiscuous mode!!
>
>
> > Thank you for the answer. I read that the M means promiscuous mode in the
> > following documents:
> > http://www.linuxdoc.org/LDP/nag2/x-087-2-iface.netstat.html
> > http://www.oreilly.com/catalog/linag2/book/ch05.html
> >
> > Are you shure about what you're saying?
> >
> > when I run "ifconfig -promisc eth0" the netstat -i continues to show the
> M.
> >
> > I also ran:
> > ip link set eth1 down
> > ip link set eth1 up promisc off
> >
> > But it doesn't work to - the M still appears.
> >
> > ----- Original Message -----
> > From: "Gene Lee" <[EMAIL PROTECTED]>
> > To: "Bruno Negr�o" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
> > Sent: Wednesday, February 20, 2002 5:25 PM
> > Subject: Re: netstat -i shows promiscuous mode!!
> >
> >
> > > From: "Bruno Negr�o" <[EMAIL PROTECTED]>
> > > > In the column "Flag" I have the flag "M" which means "promicuous mode"
> > as
> > > I
> > > > read in some documentations.
> > > >
> > > > Why is my interfaces starting up in promiscuous mode. Which are the
> > > > implications? How can I stop it?
> > >
> > > The M does not stand for promiscuous mode. Where did you read that? The
> > > flags are a shortened form of the state of the interface, as if you had
> > done
> > > an "ifconfig". See for yourself, do an "ifconfig eth0" and "ifconfig lo"
> > and
> > > see how it corresponds:
> > >
> > > BMRU = Broadcast, Multicast, Running, Up
> > > LRU = Loopback, Running, Up
> > >
> > > --
> > > Gene Lee
> > > [EMAIL PROTECTED]
> > > [EMAIL PROTECTED]
> > >
> > > _______________________________________________
> > > Firewalls mailing list
> > > [EMAIL PROTECTED]
> > > http://lists.gnac.net/mailman/listinfo/firewalls
> > >
> >
> > _______________________________________________
> > Firewalls mailing list
> > [EMAIL PROTECTED]
> > http://lists.gnac.net/mailman/listinfo/firewalls
> >
> >
> >
>
> _______________________________________________
> Firewalls mailing list
> [EMAIL PROTECTED]
> http://lists.gnac.net/mailman/listinfo/firewalls
>
_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls
