• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 220
  • Last Modified:

Linux acting in promiscuous mode

Hi there!
The question is that I want to setup a Linux Box with 2 ethernet cards running in promiscuous mode, and then plug it between 2 workstations to monitor network traffic without reconfigure any routing table and any network address from the workstations neither the Linux Box. I mean 2 eth cards without IP address.
Is it possible?, Are there other solutions?

Thank you in advance!
1 Solution
I'll make this a comment instead of an answer since i'm only 90% sure.

I don't think it cam be done without an IP address. Linux needs something to tell the kernel the ethernet(s) are up. This is done(usually) with ifconfig which needs an address in its argument.

You might try using private IP numbers that match the class of the networks you're monitoring(i.e. 192.168.x.x for class c). Then, using tcpdump I think you'll see everything on each network segment.

If that works you can run tcpdump in two console windows with each looking at one interface if you want.

Configure linux kernel as a bridge...
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Train for your Pen Testing Engineer Certification

Enroll today in this bundle of courses to gain experience in the logistics of pen testing, Linux fundamentals, vulnerability assessments, detecting live systems, and more! This series, valued at $3,000, is free for Premium members, Team Accounts, and Qualified Experts.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now