Andi Kleen wrote: > Did you use the same tcpdump/libpcap in 2.2 and 2.4 ? Yes. To separate out other bug reports and mentions, here is my own test environment: 2.2.20 MDK kernel, or 2.2.21-pre2 custom kernel, or 2.4.18-preX MDK kernel, or 2.4.18-preX custom kernel net-tools 1.60 iproute2 2.2.4 libpcap 0.6.2 tcpdump 3.6.2 glibc 2.2.4 + bug fixes from 2.2.5 (MDK glibc) So, same userland for 2.2 and 2.4. When I boot into 2.2 MDK or custom kernel, SIOCGIFFLAGS indicates IFF_PROMISC when tcpdump is running. When I boot into 2.4 MDK or custom kernel, SIOCGIFFLAGS does not indicate IFF_PROMISC under the same conditions. Thems the facts, gentlemen :) -- Jeff Garzik | "I went through my candy like hot oatmeal Building 1024 | through an internally-buttered weasel." MandrakeSoft | - goats.com - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html