Ethereal-users: Re: [ethereal-users] promisc mode

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <gharris@xxxxxxxxxxxx>
Date: Sun, 30 Jan 2000 12:19:41 -0800
> I'm sorry in a case this has already been sloved in later
> releases of Ethereal, but version 0.7.7 (and likely before)
> has problems leaving promiscuous mode after entering it.

Ethereal doesn't itself enter promiscuous mode; it merely passes a
non-zero value as the "promisc" flag to "pcap_open_live()".

The standard LBL libpcap appears to, after doing so, call

	atexit(linux_restore_ifr);

which attempts to restore the flags.

If that's not working for Ethereal, I'm curious whether it even works
for tcpdump....