[Snort-users] enter/exit promisc mode occasionally?

Andreas Hasenack andreas at ...814...
Thu Jun 14 15:25:40 EDT 2001


Em Thu, Jun 14, 2001 at 02:36:30PM -0400, Sheahan, Paul (PCLN-NW) escreveu:
> device eth0 left promiscuous mode
> device eth0 entered promiscuous mode
> device eth0 left promiscuous mode
> device eth0 entered promiscuous mode
> device eth0 left promiscuous mode
> device eth0 entered promiscuous mode
> 
> These are all a few seconds apart at most. Has anyone else experienced this?
> This doesn't look normal......

Is this a RTL8139 perhaps...? I saw this happening many times with that
NIC and a linux kernel.





More information about the Snort-users mailing list