On Thu, Jan 17, 2008 at 08:37:55AM +0100, Simon Matter wrote: > > I have a really basic question (I think). We have two boxes connected > > to a lan segment on a hub. One is a Windows box running "Show Traffic", > > the other is a CentOS 5 Linux box running "ntop". Both boxes should be > > able to sniff all of the traffic on that hub (not a switch). > > > > The Windows box does just fine, Show Traffic is able to display traffic > > destined for other boxes on the network segment. > > > > The linux box, OTOH, seems to only see multicast traffic and traffic > > that is destined for its interface. > > > > ... > > > > So the question is: Is it possible that I have locked down the firewall > > settings in such a way as to block packets not destined for the interface? > > > > (Everything else on the box works fine. Shorewall / netfilter is doing > > its job quite well.) > > Are you really sure your CentOS 5 interfaces are running in promiscuous mode?
Note that there do exist a small number of network cards which can't, although they should be rare nowadays. ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
