Snort mailing list archives

RE: e100 promisc mode


From: "Peter Param" <pparam () stvincents com au>
Date: Mon, 04 Nov 2002 08:28:28 +1100

Hey Jack,

Ben Feinstein gave me this  URL that provided a driver that worked well
for me:
http://www.intel.com/support/network/adapter/1000/linux/e100.htm

Like yourself I was using the Compaq driver without much success.

cheers

Peter
Jack Lyons <jack.lyons () martinagency com> 11/02/02 00:38 AM >>>
Related issue, I have having problems getting the e100 driver going in
full-duplex.  I have tried editing modules.conf and added options, but
it
doesn't seem to work.  It is redhat 7.3 on Compaq server

Thanks.

-----Original Message-----
From: Peter Param [mailto:pparam () stvincents com au] 
Sent: Thursday, October 31, 2002 4:55 PM
To: snort-users () lists sourceforge net
Subject: [Snort-users] e100 promisc mode

Hi all,

Recently installed Snort 1.9 on linux 2.4.7-10.  I had to get the latest
e100 driver (2.1.6) from Compaq to get it working on the machine with an
inbuilt NIC.  The card works but not in promisc mode.  Doing a "ifconfig
eth0 promisc" makes it look like its working in promiscuous mode but
really it isn't.  I confirmed this by running tcpdump alongside
snort...only sees broadcasts.  Another machine (an ibook with ver10) on
the same segment (same hub etc) running tcpdump also, confirms that it
can see all frames.  I'm stumped!...any ideas??

cheers
Peter


**********************************************************************
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been
virus scanned and although no viruses were detected by the system,
St Vincent's Hospital accepts no liability for any consequential
damage resulting from email containing any computer viruses.

**********************************************************************


-------------------------------------------------------
This sf.net email is sponsored by: Influence the future 
of Java(TM) technology. Join the Java Community 
Process(SM) (JCP(SM)) program now. 
http://ads.sourceforge.net/cgi-bin/redirect.pl?sunm0004en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


This email and its contents may be confidential.  If it is and you are
not
the intended recipient, please do not disclose or use the information
within
this email or its attachments.  If you have received this email in
error,
please delete it immediately.  Thank you.





**********************************************************************
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been
virus scanned and although no viruses were detected by the system,
St Vincent's Hospital accepts no liability for any consequential
damage resulting from email containing any computer viruses.

**********************************************************************


-------------------------------------------------------
This SF.net email is sponsored by: ApacheCon, November 18-21 in
Las Vegas (supported by COMDEX), the only Apache event to be
fully supported by the ASF. http://www.apachecon.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: