Advertisement
Help Keep Boards Alive. Support us by going ad free today. See here: https://subscriptions.boards.ie/.
If we do not hit our goal we will be forced to close the site.

Current status: https://keepboardsalive.com/

Annual subs are best for most impact. If you are still undecided on going Ad Free - you can also donate using the Paypal Donate option. All contribution helps. Thank you.
https://www.boards.ie/group/1878-subscribers-forum

Private Group for paid up members of Boards.ie. Join the club.

network device keeps entering and leaving promiscuous mode

  • 12-06-2013 02:16PM
    #1
    [-0-]
    Closed Accounts Posts: 3,981 ✭✭✭


    As the topic says, my network device keeps doing this and I have no idea why.
    Jun 12 07:53:03 server kernel: device eth5 left promiscuous mode
    Jun 12 08:20:02 server kernel: device eth5 entered promiscuous mode
    Jun 12 08:33:03 server kernel: device eth5 left promiscuous mode
    Jun 12 08:40:01 server kernel: device eth5 entered promiscuous mode
    Jun 12 08:53:04 server kernel: device eth5 left promiscuous mode
    Jun 12 09:00:01 server kernel: device eth5 entered promiscuous mode
    Jun 12 09:02:51 server kernel: device eth5 left promiscuous mode
    Jun 12 09:10:01 server kernel: device eth5 entered promiscuous mode
    Jun 12 09:10:11 server kernel: device eth5 left promiscuous mode

    Can anyone shed some light on this? It has been doing this for days, every couple of minutes.


Comments

  • #2
    Khannie
    Registered Users, Registered Users 2 Posts: 37,485 ✭✭✭✭Khannie


    I have only ever had that on one other device - a (very) cheap USB wireless N card. I wasn't sure if it was crappy driver code, or crappy hardware.

    Is yours in a server? NIC's do occasionally break though it's usually the last thing you think of. I wouldn't like that though. Have you another one the same that you can temporarily replace it with? If it stops happening you have your answer.


  • #3
    [-0-]
    Closed Accounts Posts: 3,981 ✭✭✭[-0-]


    Found the culprit! Someone had set up a script to tcpdump regularly from that device. Very naughty and yes, it's one of our servers.
    Thanks for the help Khannie!


Advertisement