[Snort-users] network card shutting itself down <slight off topic>

Andrew R. Baker andrewb at ...2...
Mon Jul 24 15:10:04 EDT 2000

Actually, I have experienced the same problem with the Intel
EtherExpress Pro 100 card in a similar enviroment.  With a sustained
traffic flow of 10-20Mbps the card would stop seeing any packets, but
the link would stay up.  I had to down the interface and reload the
driver module (this was a Linux 2.2 box).
The other EEPro cards in the box (the ones not being used to sniff
traffic) would be fine.  I "fixed" it by adding a cron job that would
reload the driver
periodically.  This is probably a driver issue, but since I am not
responsible for the machine anymore I won't investigate.  However, the
DEC tulip card I had sniffing the same traffic never gave me any


Jeff Nathan wrote:
> Hi Guys.
> I wanted to preface this response by saying "I'm really biased against
> the 3Com 3c905 card".  Now then, with that be said I wanted to suggest
> downing the interface and then bring it back up.  That _might_ help.
> I've also seen suggestions to use the Intel EtherExpress card, which is
> indeed a great card (I85229 chipset cards rock!) and tends to have great
> driver support.  In the course of (ahem) performance testing some
> network equipment, I've seen a boatload of 3Com 3c905 cards go belly up.
Andrew R. Baker                   <andrewb at ...2...>
Core R&D                         http://www.hiverworld.com
Hiverworld, Inc.       Continuous Adaptive Risk Management

More information about the Snort-users mailing list