#1  
Old 5th June 2005, 17:47
lulu lulu is offline
Junior Member
 
Join Date: Apr 2005
Posts: 4
Thanks: 0
Thanked 0 Times in 0 Posts
Default Promiscuous mode

When I'm running chkrootkit it always gives me a warning saying that my network interface eth0 is in promiscuous mode. What does it mean, and do I have to worry about it?
Reply With Quote
Sponsored Links
  #2  
Old 5th June 2005, 19:31
joe joe is offline
Junior Member
 
Join Date: Apr 2005
Posts: 23
Thanks: 0
Thanked 1 Time in 1 Post
Default

It means that your interface is set to sniff packets from other people. Do you have snort running? That'll put it in promisc mode.
__________________
Joe Topjian
email: joe@adminspotting.net
web: http://adminspotting.net
Reply With Quote
  #3  
Old 6th June 2005, 13:05
peter peter is offline
Junior Member
 
Join Date: May 2005
Posts: 6
Thanks: 0
Thanked 0 Times in 0 Posts
 
Default

I found the following definition on http://searchsecurity.techtarget.com...518283,00.html:

Quote:
1) In a network, promiscuous mode allows a network device to intercept and read each network packet that arrives in its entirety. This mode of operation is sometimes given to a network snoop server that captures and saves all packets for analysis (for example, for monitoring network usage).

2) In an Ethernet local area network (LAN), promiscuous mode is a mode of operation in which every data packet transmitted can be received and read by a network adapter. Promiscuous mode must be supported by each network adapter as well as by the input/output driver in the host operating system. Promiscuous mode is often used to monitor network activity.

Promiscuous mode is the opposite of non-promiscuous mode. When a data packet is transmitted in non-promiscuous mode, all the LAN devices "listen to" the data to determine if the network address included in the data packet is theirs. If it isn't, the data packet is passed onto the next LAN device until the device with the correct network address is reached. That device then receives and reads the data.
Peter
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT +2. The time now is 14:23.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.