[tcpdump-workers] undesired promiscuous mode toggling

2004-08-26 Thread Chris Reining
I am running into an interesting promiscuous mode issue on Redhat Enterprise WS 3, kernel version 2.4.21, libpcap version 0.7.2 and tcpdump 3.7.2. The issue is unanticipated toggling of promisc state. I am running Snort version 2.1.2 which itself sets promisc first on the interface in question and

Re: [tcpdump-workers] undesired promiscuous mode toggling

2004-08-26 Thread Guy Harris
On Aug 26, 2004, at 3:43 PM, Chris Reining wrote: I am running into an interesting promiscuous mode issue on Redhat Enterprise WS 3, kernel version 2.4.21, libpcap version 0.7.2 and tcpdump 3.7.2. The issue is unanticipated toggling of promisc state. I am running Snort version 2.1.2 which itself

Re: [tcpdump-workers] localhost on Solaris

2004-08-26 Thread rick jones
my _guess_ would be you would need to write some pseudo-driver (driver, not module) that looks more or less like a NIC driver, but simply loops things back up. call it, oh, the loop driver. get it installed into the system and create the loop0 interface - bring lo0 down and bring 127.0.0.1