I have a machine that has two interfaces. One is set up with a regular ip address eth0 and one if set up in promiscuous mode eth1. When I start etherape and select an interface the only one that it sees is the one with a regular ip address. The one in promiscuous mode is not in the drop down list.
I am using a network tap in place in between my firewall and my main switch in my network. This system is used for an IDS system but it is nice to be able to see the traffic in a GUI to determine network abuse. With eth1 using the network tap everything works (snort, tcpdump, ethereal) but etherape doesnt see the nic and will not display the traffic.
Am I doing something wrong?
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
I have a machine that has two interfaces. One is set up with a regular ip address eth0 and one if set up in promiscuous mode eth1. When I start etherape and select an interface the only one that it sees is the one with a regular ip address. The one in promiscuous mode is not in the drop down list.
I am using a network tap in place in between my firewall and my main switch in my network. This system is used for an IDS system but it is nice to be able to see the traffic in a GUI to determine network abuse. With eth1 using the network tap everything works (snort, tcpdump, ethereal) but etherape doesnt see the nic and will not display the traffic.
Am I doing something wrong?