EFW Support

Support => General Support => Topic started by: Linjan on Wednesday 17 June 2009, 11:08:45 pm


Title: [strange messages] tail -f /var/log/messages
Post by: Linjan on Wednesday 17 June 2009, 11:08:45 pm
I am using EFW on the machine with real ip.
Last time i've got these messages in log:
Code:
Jun 17 17:03:08 efw-1245173387 kernel: device eth0 entered promiscuous mode
Jun 17 17:03:08 efw-1245173387 kernel: audit(1245243788.888:22): dev=eth0 prom=256 old_prom=0 auid=4294967295
Jun 17 17:03:08 efw-1245173387 kernel: device eth0 left promiscuous mode
Jun 17 17:03:08 efw-1245173387 kernel: audit(1245243788.900:23): dev=eth0 prom=0 old_prom=256 auid=4294967295
Jun 17 17:03:08 efw-1245173387 snort[28627]: Initializing daemon mode
Jun 17 17:03:08 efw-1245173387 kernel: device eth0 entered promiscuous mode
Jun 17 17:03:08 efw-1245173387 kernel: audit(1245243788.912:24): dev=eth0 prom=256 old_prom=0 auid=4294967295
What it means?

Title: Re: [strange messages] tail -f /var/log/messages
Post by: gyp_the_cat on Thursday 25 June 2009, 11:52:03 pm
Hi Linjan,

Are you running Snort (IDS) on your EFW?

This could be something to do with the intrusion detecting sniffing the packets on it's real IP interface.

Gyp


Powered by SMF 1.1 RC2 | SMF © 2001-2005, Lewis Media