after I ./chkrootkit, I have nothing except

**skyfolly** · 07-30-2003

Code:

Checking `asp'... not infected
Checking `bindshell'... not infected
Checking `lkm'... nothing detected
Checking `rexedcs'... not found
Checking `sniffer'...
eth0 is not promisc
Checking `wted'... nothing deleted
Checking `w55808'... not infected
Checking `scalper'... not infected
Checking `slapper'... not infected
Checking `z2'...

??

eth0 is not promise???

**genlee** · 07-30-2003

Means it is not in promiscious mode which is most commonly used to sniff packets.

**skyfolly** · 07-30-2003

ha ha ha, i am so dumb, still dun get it, anyway, thanks

**Dolda2000** · 07-30-2003

Normally, a NIC will only process packets that were headed for it. For example, if you're using a hub (instead of a switch) to connect your computers, all packets will be sent to all computers, but the NIC will discard all packages that weren't intended for it. Putting it into promiscuous mode means that it will receive all packages, so that you can monitor packets that were sent between other computers in your network.

**skyfolly** · 07-30-2003

how do i do it? thanks

**Dolda2000** · 07-30-2003

Hmm? Why would you want to?

**skyfolly** · 07-30-2003

make eth0 promisc??? he he, nevamind

**craig_mcd** · 07-30-2003

ifconfig <device> promisc

Normally you dont need to turn enable it as most apps that require promiscuous mode will enable it for you, like tcpdump for example.

**skyfolly** · 07-30-2003

I see, cheers mate!!!

**andutt** · 07-30-2003

Use the command tcpdump to see all packets that "goes throw" you NIC...in hubbed environments you can for example see username and password in cleartext on hosts that have FTP-servers...can be fun..

Thread Tools

Display

after I ./chkrootkit, I have nothing except

Posting Permissions