On Tue, Jul 03, 2001 at 05:17:41PM +0000, Subba Rao wrote:
> While quiting, this tool does not restore the original settings of the
> interface.
There were some problems with older versions of libpcap on Linux that
meant that sometimes promiscuous mode wouldn't get turned off.
With the current version of libpcap from tcpdump.org:
1) on systems with a Linux 2.2 or later kernel, libpcap uses a
mechanism in which the kernel automatically keeps track of
requests to enable promiscuous mode - and of closes of file
descriptors on which those requests were made - so that it
should automatically turn promiscuous mode off for you;
2) even on systems with older kernels, libpcap makes a better
attempt to fix up promiscuous mode, although it can't do a
perfect job.
At least some Linux distributions also come with versions of libpcap
that use the newer mechanism on 2.2 or later kernels; perhaps either
1) you are using a 2.0[.x] kernel
or
2) Etherape was statically linked with an older version of
libpcap (I don't know how to determine with which version it
was linked), or it was dynamically linked with libpcap and
whatever Linux distribution you're using has a libpcap that
doesn't use the 2.2-and-later kernel mechanism (I don't know
how to determine what kernel mechanism it's using).
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
