[Snort-users] Dual ethernet cards under Linux - could be of use to others
Jason.Haar at ...294...
Sun Nov 5 16:38:53 EST 2000
On Fri, Nov 03, 2000 at 09:38:16AM -0600, A.L.Lambert wrote:
> I've run across this before, and for the life of me I can't seem
> to find the related e-mail's in my archive. As I recall, the fix was
> using a kernel greater than 2.2.13, and doing:
> echo 1 > /proc/sys/net/ipv4/conf/eth0/hidden
> echo 1 > /proc/sys/net/ipv4/conf/eth1/hidden
I'm using 2.2.16 and that didn't work. Well, I didn't "hide" eth0 as this is
my workstation we're talking about, but I went through every variable in
/proc/sys/net/ipv4/conf/eth1/ and set it to the most "private" setting I
could figure out, and still eth1 is ARPing replies for the IP address on eth0.
Does that sound like a kernel bug? I don't understand why Linux thinks
dual-homed cards should be ARPing for each other by default.
I'm contacting the author.
Unix/Special Projects, Trimble NZ
Phone: +64 3 9635 377 Fax: +64 3 9635 417
More information about the Snort-users