Re: Interface promiscuity obscurity in Linux

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Ricardo Branco wrote:

>This affects Linux 2.2 and 2.4
>
>Using libpcap to put the interface in promiscuous mode, will cause that
>ifconfig(8) doesn't show it!
>  
>
This is an old issue (noticed this nearly 2 years ago...) but can be 
contributed to 'bad' userspace tools.

>libpcap uses setsockopt(..., SOL_PACKET, PACKET_ADD_MEMBERSHIP, ...) with
>PACKET_MR_PROMISC to set the interface in promiscuous mode.
>  
>
The interesting thing is that the PF_PACKET sockets are also not 
reported by netstat. Anyway this should be fixed.

/ih



[Index of Archives]     [Linux Security]     [Netfilter]     [PHP]     [Yosemite News]     [Linux Kernel]

  Powered by Linux