[strange messages] tail -f /var/log/messages

[Guest]

[Linjan]

I am using EFW on the machine with real ip.
Last time i've got these messages in log:

Code:

Jun 17 17:03:08 efw-1245173387 kernel: device eth0 entered promiscuous mode
Jun 17 17:03:08 efw-1245173387 kernel: audit(1245243788.888:22): dev=eth0 prom=256 old_prom=0 auid=4294967295
Jun 17 17:03:08 efw-1245173387 kernel: device eth0 left promiscuous mode
Jun 17 17:03:08 efw-1245173387 kernel: audit(1245243788.900:23): dev=eth0 prom=0 old_prom=256 auid=4294967295
Jun 17 17:03:08 efw-1245173387 snort[28627]: Initializing daemon mode
Jun 17 17:03:08 efw-1245173387 kernel: device eth0 entered promiscuous mode
Jun 17 17:03:08 efw-1245173387 kernel: audit(1245243788.912:24): dev=eth0 prom=256 old_prom=0 auid=4294967295

What it means?

[gyp_the_cat]

Hi Linjan,

Are you running Snort (IDS) on your EFW?

This could be something to do with the intrusion detecting sniffing the packets on it's real IP interface.

Gyp