Re: What's This Log Entry Mean?

Dan N wrote: 
On Sun, 29 Jan 2006 22:52:15 -0500, Lew Pitcher wrote:


The first line here says that the system is removing the "promiscuous
mode" listening from eth0, presumably as a result of a timed request to
the process that is listening to the network traffic.



Thanks.  It's probably snort doing this?

Dan


Yes. Your Snort has been restarted.

So does also e.g. ntop.

--

Tauno Voipio
tauno voipio (at) iki fi

.

Relevant Pages

  • Re: Whats This Log Entry Mean?
    ... >>> The first line here says that the system is removing the "promiscuous>> mode" listening from eth0, presumably as a result of a timed request to>> the process that is listening to the network traffic. ... I believe most programs which scan continuously for APs usually put the wireless port into promiscuous mode. ... eth0 shouldn't be a wireless interface. ...
    (comp.os.linux.networking)
  • Re: Whats This Log Entry Mean?
    ... > The first line here says that the system is removing the "promiscuous ... > mode" listening from eth0, presumably as a result of a timed request to ... > the process that is listening to the network traffic. ...
    (comp.os.linux.networking)
  • Re: Newbie NAT question
    ... > Tauno Voipio escreveu: ... >> of the gateway host, so we do not need to guess so much. ... > eth0 Encapsulamento do Link: ... > pkts bytes target prot opt in out source destination ...
    (comp.os.linux.networking)
  • Re: Whats This Log Entry Mean?
    ... ethernet devices only listen for traffic addressed to their own ... This abnormal state is called "promiscuous mode". ... that is listening to the network traffic. ... This line says that the kernel is re-instituting "promiscuous mode" on eth0. ...
    (comp.os.linux.networking)
  • Re: eth1 not working
    ... > The problem is that only eth0 works. ... > I have tried different IP addressses, switching the IP ... tauno voipio iki fi ...
    (comp.os.linux.networking)