Sponsored Content
Special Forums IP Networking tcpdump and promiscuous mode (on Linux and HP-UX) Post 302171535 by Smiling Dragon on Thursday 28th of February 2008 05:25:32 PM
Old 02-28-2008
It switches modes when it's run, rather than at install time
The main effect of running in this mode is an increase in network traffic through the card (it's likely to cause a small increase in CPU load too).
If you completely overwhelm the card, you could potentially start dropping packets, inbcluding ones genuinly destined for this server - not very likely to happen with modern hardware though.

No major security concerns but one could make the case that accepting more data in over the NIC increases one's exposure to potential threats. Not exactly a biggie though Smilie
 

5 More Discussions You Might Find Interesting

1. IP Networking

promiscuous mode machines

/* SCO OpenServer 5 */ anyone know an effective way to tell what machines, if any, are running in promiscuous mode?? e0- (1 Reply)
Discussion started by: LowOrderBit
1 Replies

2. SuSE

Convet Linux OS from text mode to graphic mode

Hi All, I used to have my suse linux(VM) server in graphic mode but not anymore since morning. I cant rolback since i loose somuch work. Any idea how to it back to normal. Thanks (6 Replies)
Discussion started by: s_linux
6 Replies

3. AIX

promiscuous mode AIX

Hi Guys, What do I need to do to set an physical adapter to promiscuous mode? The networkport is already spanned/mirrored. Is this also possible when there is an virtual nic (through vios) configured? regards, Randy (7 Replies)
Discussion started by: raba
7 Replies

4. UNIX for Dummies Questions & Answers

Will Linux force NIC into promiscuous mode?

Right now I have a computer that I want to use as the monitor for my network. It's currently running Windows 7, and so as I understand it the NIC won't monitor all the traffic on the network. So my question is, if I install Linux on this computer will I be able to force the NIC card into... (1 Reply)
Discussion started by: iJeydon
1 Replies

5. Red Hat

Interface goes into promiscuous mode

Hi all, I am using a Linux VM. Once the node boots up, I am able to access it and it is able to ping its default gateway. At that time, the config is; eth1 Link encap:Ethernet HWaddr 00:50:56:01:01:FB inet addr:142.133.174.246 Bcast:142.133.175.255 ... (1 Reply)
Discussion started by: Junaid Subhani
1 Replies
SINFOD(8)							   User Manuals 							 SINFOD(8)

NAME
sinfod - a monitoring tool for networked computers SYNOPSIS
sinfod [-F] [-q] [-V] [-b #.#.#.#] [-c] [-n card ] [ -N nicevalue ] [ -m marker ] [ -i processname ] [-s][-W] DESCRIPTION
sinfod distributes system information to other sinfods on your local network. These Information include the system load, memory utilization and the `TOP-5' processes on every machine. It's main advantage is, that these informations are broadcasted using the udp(7) protocol. If each node broadcasts it's information in a cooperative manner, the network load is O(N), where N is the number of nodes in your network. Other systems to monitor your cluster load (e.g. rup(1) ) are using a polling scheme where every node has to ask every other node for the system information: In that case the network load is O(N**2). The task of sinfod is to broadcast the relevant information for the local node and to collect broadcasts from other nodes. Other programs ( sinfo(1) ) can get access to this information via a simple tcp(7) connection that normally is routed through the local loopback inter- face. OPTIONS
-F/--foreground Unlike normal operation, sinfod will not detach from the terminal when given this option. Some debugging informations will be visi- ble. -q/--quiet Start quietly - for init scripts. -V/--version Print the version number and exit. -b #.#.#.#/--bcastaddress=#.#.#.# Set the broadcast address of the sinfod. Default is 255.255.255.255. In you want to run sinfod without a network card "-b 127.0.0.1" may be necessary. -c/--cmdline Broadcast the full command line of a process instead of the command only. -m marker/--marker=marker Mark the machine with a name. e.g. laboratory, pool or cluster. -i/--ignore <process> Don't broadcast any information on <process> ; --ignore may be set multiple times. -t/--top <count> Broadcast information on the top <count> processes; default: 5 -n card/--networkcard=card Set the name of the network card whose informations will be broadcasted. (e.g. eth0). Default is the network card that saw the most traffic at the start of sinfod. -N nicevalue/--nice=nicevalue Set the priority of this demon to nicevalue. Default is 15. -s/--spymode Deactivate the TCP interface and the collection of received packets. The demon starts in a broadcast-only mode. -W/--watchdog Start with simple watchdog. AUTHOR
Juergen Rinas <jrinas@gmx.de> SEE ALSO
sinfo(1),sshallsinfo(1), Linux JANUARY 2005 SINFOD(8)
All times are GMT -4. The time now is 10:08 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy