[techtalk] Promiscuos setting

[jenn at simegen.com]

Subba Rao wrote:


> The system I am talking about has 3 ethernet interfaces. After the Linux
> system has started up the output of 'ifconfig' shows the following flags:
> 
> UP BROADCAST RUNNING MULTICAST
> 
> Sometime after booting up the system, all the 3 interfaces will have the
> following settings:
> 
> UP BROADCAST PROMISC RUNNING MULTICAST
> 
> I don't know which process is setting this. Besides Tcpdump and Snort are
> listening only on one interface. Why are the other interfaces being set into
> promiscuos mode? If anyone experienced this problem, I would like to know how
> you went about investigating this change in interface settings.

Simplest way I know of to sort it out is this:

Comment out -everything- between the first and the second message. 
Uncomment them one at a time, until the message reappears.
Then investigate the culprit. :)



Jenn V.
-- 
     "Do you ever wonder if there's a whole section of geek culture
             you miss out on by being a geek?" - Dancer.

jenn at simegen.com     Jenn Vesperman     http://www.simegen.com/~jenn/