lkml.org 
[lkml]   [1997]   [Jan]   [26]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: Too Much ARP-ing
    On Sun, 26 Jan 1997, Phil Lewis wrote:

    > Your ethernet card is in promiscuous mode.

    I checked the code for tcpdump, and found the code that turns promiscuous
    mode on in tcpdump-3.0.4-1/libpcap-0.0.6/pcap-bpf.c:

    if (promisc)
    /* set promiscuous mode, okay if it fails */
    (void)ioctl(p->fd, BIOCPROMISC, NULL);

    But I can't find BIOCPROMISC anywhere! In /usr/include/linux/if.h
    there's:

    #define IFF_PROMISC 0x100 /* receive all packets */

    ...but that's just part of a bitfield. I then checked the kernel code and
    found 'PROMISC' in net/802/{fddi,tr}.c, but that's for FDDI and TokenRing,
    not ether. And of course it's all over the drivers/net/* files...

    Anyone care to explain how promiscuous mode is set/unset?

    TIA,
    Omega

    Erik Walthinsen - Programmer, webmaster, 3D artist, etc. __
    __ / /\
    / \ omega@sequent.com Work: (503)578-5314 / / \
    | | M E G A omega@teleport.com Home: (503)281-4281 / / /\ \
    _\ /_ psu12113@odin.cc.pdx.edu Majoring in CS / / /\ \ \
    / /_/__\ \ \
    Omega Station: http://www.teleport.com/~omega/ /________\ \ \
    Info on Linux, Graphics, Descent, Laptops, etc. \___________\/


    \
     
     \ /
      Last update: 2005-03-22 13:38    [W:0.043 / U:64.208 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site