From owner-freebsd-questions Wed Nov 8 14:28:12 2000 Delivered-To: freebsd-questions@freebsd.org Received: from giroc.albury.net.au (giroc.albury.NET.AU [203.15.244.13]) by hub.freebsd.org (Postfix) with ESMTP id 7D53737B479 for ; Wed, 8 Nov 2000 14:28:08 -0800 (PST) Received: (from nicks@localhost) by giroc.albury.net.au (8.11.1/8.11.1) id eA8MRqw89398; Thu, 9 Nov 2000 09:27:52 +1100 (EST) Date: Thu, 9 Nov 2000 09:27:52 +1100 From: Nick Slager To: Bob Fawcett Cc: questions@FreeBSD.ORG Subject: Re: Promiscuous mode Message-ID: <20001109092752.C85308@albury.net.au> References: <200011081510.KAA09450@steed-100.catia.gulfaero.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <200011081510.KAA09450@steed-100.catia.gulfaero.com>; from bobf@gulfaero.com on Wed, Nov 08, 2000 at 10:16:59AM -0500 X-Homer: Whoohooooooo! Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Thus spake Bob Fawcett (bobf@gulfaero.com): > How do I set an interface to allow promiscuous mode? I want to run > snort on the box. You need to have the bpf pseudo device in your kernel config, and appropriate entries in /dev. You'll also need appropriate permissions to read from the bpf device(s), which by default means root privileges. The bpf pseudo device has been in GENERIC for some time, so if you're using a recent version of FreeBSD, you're all set. Nick -- From a Sun Microsystems bug report (#4102680): "Workaround: don't pound on the mouse like a wild monkey." To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message