PDA

View Full Version : RKHunter - Promiscuous interface warning



nsr81
3rd January 2005, 08:22 AM
Hi all,

I'm running FC1 and recently decided to install SNORT. After that, RKHunter started giving out warnings about a promiscuous interface.



* Interfaces
Scanning for promiscuous interfaces [ Warning! ]
Found promiscuous interface. Please use option '--createlogfile' and check the logfile


Logfile:


[01:55:55] ------------------------------- Backdoors -----------------------------
[01:55:57] Checking network interfaces (promiscuous mode)... [ WARNING ]
[01:55:57] Possible promisc interfaces:
[01:55:57] Output test 1:
[01:55:57] Output test 2: eth0


I am still getting familiar with Snort so I do not know if that warning is due to snort's normal operations or do I have something to worry about.

Thanks for all the help :)

Jman
4th January 2005, 03:41 AM
Snort does this to your interfaces. I'm not sure what exactly promiscuous mode is yet.