• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 215
  • Last Modified:

Linux acting in promiscuous mode

Hi there!
The question is that I want to setup a Linux Box with 2 ethernet cards running in promiscuous mode, and then plug it between 2 workstations to monitor network traffic without reconfigure any routing table and any network address from the workstations neither the Linux Box. I mean 2 eth cards without IP address.
Is it possible?, Are there other solutions?

Thank you in advance!
0
trickle
Asked:
trickle
1 Solution
 
jeffa072897Commented:
I'll make this a comment instead of an answer since i'm only 90% sure.

I don't think it cam be done without an IP address. Linux needs something to tell the kernel the ethernet(s) are up. This is done(usually) with ifconfig which needs an address in its argument.

You might try using private IP numbers that match the class of the networks you're monitoring(i.e. 192.168.x.x for class c). Then, using tcpdump I think you'll see everything on each network segment.

If that works you can run tcpdump in two console windows with each looking at one interface if you want.


0
 
marcelofrCommented:
Configure linux kernel as a bridge...
0

Featured Post

[Webinar] Cloud and Mobile-First Strategy

Maybe you’ve fully adopted the cloud since the beginning. Or maybe you started with on-prem resources but are pursuing a “cloud and mobile first” strategy. Getting to that end state has its challenges. Discover how to build out a 100% cloud and mobile IT strategy in this webinar.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now