Paul Howarth wrote:
On Tue, 2005-08-23 at 20:52 +0200, Oliver Leitner wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160
Teo Fonrouge wrote:
| Hello,
|
| Using a FC4 box.
|
| Checking in my /var/log/messages file I noticed that the kernel has
| setting my eth0 interface in promiscuous mode regularly:
|
| Aug 21 14:30:38 sx1 kernel: eth0: Setting promiscuous mode. Aug 21
| 14:30:38 sx1 kernel: device eth0 entered promiscuous mode Aug 21
| 14:30:38 sx1 kernel: bridge-eth0: enabled promiscuous mode Aug 21
| 14:31:36 sx1 kernel: device eth0 left promiscuous mode Aug 21
| 14:31:36 sx1 kernel: bridge-eth0: disabled promiscuous mode Aug 21
| 14:31:36 sx1 kernel: eth0: Setting promiscuous mode. Aug 21
| 14:31:36 sx1 kernel: device eth0 entered promiscuous mode Aug 21
| 14:31:36 sx1 kernel: bridge-eth0: enabled promiscuous mode
|
| I believe that I haven't ran any program that causes this.
|
| It is a normal kernel operation ?
|
| How can I know what is causing this ?
|
|
| best regards
|
| Teo Fonrogue
|
does any of these programs ring a bell?:
iptraf
tcpdump
ethereal
or any other monitoring program?
Or VMware?
Paul.
Yes.
VMware is running in this box.
hmmmmmmmm.
How do you know that VMware maybe is causing this ?
About the WinXP Client machine running regularly run on it: of course
I'll have to check if this windoze has some virus/spy*/nastythings.
Thank you Paul.
best regards
Teo Fonrouge
