topic Re: Promiscuous Mode in Operating System - HP-UX

Promiscuous Mode

Pete Kelly — Tue, 18 May 2004 10:32:27 GMT

Hello there...

Is there a simple way to tell whether a network card is running in promiscuous mode?

Re: Promiscuous Mode

Nicolas Dumeige — Tue, 18 May 2004 11:04:24 GMT

Hello,

Set the network card in promiscuous mode makes an entry in the syslog, doesn't it ?
If so, use dmesg to grep that entry.

But there must be a direct way for sure.

My 0,02 cents

Nicolas

Re: Promiscuous Mode

Sridhar Bhaskarla — Tue, 18 May 2004 11:08:57 GMT

Hi,

On few UNIXes, you could use ifstatus command. But it is not available for HP. You may have to get the source code and compile it for HP-UX.

-Sri

Re: Promiscuous Mode

Brian Hackley — Wed, 19 May 2004 09:53:35 GMT

Hello,

HP Support has a tool called "lanshow" that will tell you if the card is in promiscuous mode when you run lanshow -f and pick thru the volumnous output.

I don't know of a user-level method of checking for promiscuous mode in use. Promiscuous mode cannot be enabled from an command level prompt or HPUX OS command option.

However, the "pcap" library puts the card into promiscuous mode. It used by tcpdump and ethereal, all of which are supplied with the HPUX Internet Express package from http://software.hp.com.

You could also search for, or write a DLPI program to query the status of the card if you wish. See the DLPI Programmer's Guide at http://docs.hp.com . Some DLPI examples are in /usr/lib/demos/networking/dlpi

Hope that helps,
-> Brian Hackley

Re: Promiscuous Mode

Andrew Cowan — Wed, 19 May 2004 13:38:06 GMT

The open-source tool has all kinds of utilities that set cards into promiscuous mode, so its logical to assume hey also have a way of detecting it too?

Re: Promiscuous Mode

Pete Kelly — Thu, 20 May 2004 02:15:14 GMT

Many thanks for the asnwers here, I've assigned points accordingly.

Brian - Just the answer I wanted to see - Cheers

Re: Promiscuous Mode

Pete Kelly — Fri, 19 Aug 2005 09:54:32 GMT

Just performing general house-keeping - Thought I'd close this thread