[26323] in bugtraq
Re: Interface promiscuity obscurity in Linux
daemon@ATHENA.MIT.EDU (Casper Dik)
Thu Jul 25 16:02:31 2002
Message-Id: <200207251829.UAA27802@romulus.Holland.Sun.COM>
To: =?iso-8859-1?Q?Fr=E9d=E9ric_Raynal?= <frederic.raynal@inria.fr>
Cc: bugtraq@securityfocus.com
In-reply-to: Your message of "Thu, 25 Jul 2002 08:09:44 +0200."
<20020725080944.A14261@minimum.inria.fr>
Date: Thu, 25 Jul 2002 20:29:58 +0200
From: Casper Dik <Casper.Dik@Sun.COM>
>The call to ioctl(SIOCGIFFLAGS) reports only promiscuous mode sets by
>ioctl(SIOCSIFFLAGS).
This is the same reason why Promiscuous mode is never reported by
"ifconfig" in Solaris 2.0 and later.
In Solaris, ifconfig primarily (or perhaps only) deals with the
"IP (or other network stack) plumbing" on devices; in that context
the "promiscuous" flag has no meaning either.
A number of Solaris device drivers export the fact whether they're
promiscuous using the "kstat" (kernel statistics) interface; unfortunately
not all devices support that yet.
$ kstat -p :::promisc
elxl:0:elxl0:promisc off
We need to fix this for most SPARC hardware still.
Casper
