[techtalk] Interface settings - noarp, promisc...

[Subba Rao]

I have 2 questions. One of the IDS system has 2 interfaces.

1. Is there any advantage by setting the sniffing interface (without IP address)
   with NOARP and PROMISC settings?

2. With NOARP set, the system interfaces would not be broadcasting it's ARP
   addresses, so wouldn't this setting make that interface hard to spoof?
   (Please correct me if I am wrong here)

Thank you for any info.
-- 

Subba Rao
subba9 at home.com
http://members.home.net/subba9/

GPG public key ID 27FC9217
Key fingerprint = 2B4C 498E 1860 5A2B 6570  5852 7527 882A 27FC 9217