[8.161][QUESTION][ANSWERED] kernel

Hi All

for the last couple of days I am getting a lot of the messages such as :

2011:03:18-21:58:07 *******  kernel: [101655.520014] device ppp0 entered promiscuous mode

2011:03:18-21:58:52 *******  kernel: [101700.501137] device ppp0 left promiscuous mode

2011:03:18-21:59:19 *******  kernel: [101727.875139] device ppp0 entered promiscuous mode

2011:03:18-21:59:37 *******  kernel: [101745.965138] device ppp0 left promiscuous mode

is that normal?

Thanks

Parents

0 Astaro Beta Bot over 14 years ago

Astaro Beta Report
--------------------------------
Version: 8.161
Type: QUESTION
State: ANSWERED
Reporter: wingman
Contributor: Billybob++
MantisID: 
Target version: 
Fixed in version: 
--------------------------------

Reply

0 Astaro Beta Bot over 14 years ago

Astaro Beta Report
--------------------------------
Version: 8.161
Type: QUESTION
State: ANSWERED
Reporter: wingman
Contributor: Billybob++
MantisID: 
Target version: 
Fixed in version: 
--------------------------------

Children

0 Billybob over 14 years ago in reply to Astaro Beta Bot

Snort (IPS) puts the NIC in promiscuous mode so it can catch all the traffic on a segment.

2011:03:18-21:58:07 ******* kernel: [101655.520014] device ppp0 entered promiscuous mode
2011:03:18-21:58:52 ******* kernel: [101700.501137] device ppp0 left promiscuous mode

This looks like a disconnect of your pppoe session so the device has to be back in promiscuous mode for IPS to function properly. Pretty normal I think unless its happening for no reason.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel