Disabling Promiscuous mode

Disabling Promiscuous mode

Post by Phooe » Mon, 21 Jun 1999 04:00:00



I've heard some comments in this newsgroup about eth0 going into promiscuous
mode.     How do you disable an Ethernet card from entering promiscuous mode
at boot time?    The [MAN] page for "ifconfig" tells you how to manually
turn this feature off, but does anyone know how to permanently disable this
feature?

I do not recall ever turning this feature on when configuring my card.  Some
people in this newsgroup believe that this is a sign of being "Hacked".
I'm not sure if this is the case, or I enabled it accidentally when
configuring my network.   Is anyone else having a problem with promiscuous
mode?

Jay
--
"I don't want to achieve immortality
through my work.  I want to achieve
it through not dying."
                     - Woody Allen

 
 
 

Disabling Promiscuous mode

Post by Malwar » Tue, 22 Jun 1999 04:00:00


Hi Phooey,


> I've heard some comments in this newsgroup about eth0 going into promiscuous
> mode.     How do you disable an Ethernet card from entering promiscuous mode
> at boot time?    The [MAN] page for "ifconfig" tells you how to manually

You have to find the program causing the switch into promiscuous mode.
Next step is then either to drop or replace the program or to convince
it with parameters not to switch into this mode.

Quote:> turn this feature off, but does anyone know how to permanently disable this
> feature?

You do not need to disable it permanently as only root does have the
right to enable this mode.

Quote:> I do not recall ever turning this feature on when configuring my card.  Some
> people in this newsgroup believe that this is a sign of being "Hacked".

I would only think about being hacked if it does occour spurious, says
without a good reason. If one is not hacked there is a well-known class
of programs which do use this feature, network-sniffer (tcpdump and
friends) and bridges are contained within.

Quote:> I'm not sure if this is the case, or I enabled it accidentally when
> configuring my network.   Is anyone else having a problem with promiscuous
> mode?

I have not. If one of my interfaces is in promiscuous mode I know why
this does happen.

Malware

 
 
 

1. Promiscuous mode....how do I disable it?

comp.unix.bsd.freebsd is not a well-propagated newsgroup (officially,
it doesn't exist):  try comp.unix.bsd.freebsd.misc if you need FreeBSD
support on a newsgroup.

The question is what put it into promiscuous mode in the first place.
If that happened on boot, the best guess is DHCP.  Once it gets an
address, though, it should drop out of promiscuous mode.  The other
likely culprit is some sort of sniffer.

2. move ipchains logging to another file

3. disable login either in graphic mode or text mode

4. Konsole can't open Psuede teletype

5. Detecting promiscuous mode

6. Using minlabel and mkfs on an 18 gig disk

7. device eth0 entered promiscuous mode

8. FIRST BYTE LOST SYSTEMATICALLY ON CLIENT SOCKET

9. promiscuous mode

10. promiscuous mode?

11. Help!!! eth0 entered Promiscuous mode???

12. Promiscuous mode ethernet adapters

13. Promiscuous Mode