PDA

View Full Version : Specific rule to use sniffer


Aknod
August 8th, 2005, 07:04 AM
I've not expected LnS to do filtering at such low level that my network card does not even receive unwanted packets! That's pretty good for me.
Now when i try to sniff the network in promiscous mode with Ethereal i see no packets.
So i have added the following rule to solve this problem:
--
Permit all packets having IPs and MACs NOT EQUAL to mine in both SOURCE and DEST modes.
--
Will this rule be secure? Can it be a hole for packet flood?

CrazyM
August 9th, 2005, 04:06 AM
-{ Quote: "I've not expected LnS to do filtering at such low level that my network card does not even receive unwanted packets! That's pretty good for me.
Now when i try to sniff the network in promiscous mode with Ethereal i see no packets." }-
Does disabling promiscuous mode help? Have you selected the correct adaptor?
Some more details on connection type, OS and LnS version might help troubleshoot this.
-{ Quote: "So i have added the following rule to solve this problem:
--
Permit all packets having IPs and MACs NOT EQUAL to mine in both SOURCE and DEST modes.
--
Will this rule be secure? Can it be a hole for packet flood?" }-
Sounds like a permit all rule which would not be a good thing. Can you post a screen shot or full details of the rule?

Regards,

CrazyM