Hello, I have 2 questions. The IDS systems has 2 interfaces. 1. Is there any advantage by setting the sniffing interface (without IP address) with NOARP and PROMISC settings? 2. With NOARP set, the system interfaces would not be broadcasting it's ARP addresses, so wouldn't this setting make that interface hard to spoof? (Please correct me if I am wrong here) Thank you for any info. -- Subba Rao [EMAIL PROTECTED] http://members.home.net/subba9/ GPG public key ID 27FC9217 Key fingerprint = 2B4C 498E 1860 5A2B 6570 5852 7527 882A 27FC 9217 - This is the TCPDUMP workers list. It is archived at http://www.tcpdump.org/lists/workers/index.html To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
