[Snort-users] Dual ethernet cards under Linux - could be of use to others

Jason Haar Jason.Haar at ...294...
Sun Nov 5 16:38:53 EST 2000

On Fri, Nov 03, 2000 at 09:38:16AM -0600, A.L.Lambert wrote:
> 	I've run across this before, and for the life of me I can't seem
> to find the related e-mail's in my archive.  As I recall, the fix was
> using a kernel greater than 2.2.13, and doing:
> echo 1 > /proc/sys/net/ipv4/conf/eth0/hidden 
> echo 1 > /proc/sys/net/ipv4/conf/eth1/hidden 

I'm using 2.2.16 and that didn't work. Well, I didn't "hide" eth0 as this is
my workstation we're talking about, but I went through every variable in
/proc/sys/net/ipv4/conf/eth1/ and set it to the most "private" setting I
could figure out, and still eth1 is ARPing replies for the IP address on eth0.

Does that sound like a kernel bug? I don't understand why Linux thinks
dual-homed cards should be ARPing for each other by default. 

I'm contacting the author.


Jason Haar

Unix/Special Projects, Trimble NZ
Phone: +64 3 9635 377 Fax: +64 3 9635 417

More information about the Snort-users mailing list