[Discuss] Linux routing question

Noel Burton-Krahn noel at burton-krahn.com
Wed Apr 16 16:20:27 PDT 2008


It sound like you want to make a network sniffer.  If that's the case
you don't need any routes at all, you just need to be attached to the
cable where the traffic is flowing through:

subnet1  ---------------- sniffer ----------- router -------------- internet
subnet2

tcpdump in promiscuous mode will read all traffic on a NIC.

Your route settings don't affect receiving packets, only what
interface a packet gets sent out on.

~Noel



On Wed, Apr 16, 2008 at 3:50 PM, Johnny Stork <lists at openenterprise.ca> wrote:
> I have a client for whom I am setting up some monitoring solutions and they
> run various subnets and so in order for the monitoring machine to reach and
> monitor devices on the other subnets, I beleive I need additional routes?
> For instance, the monitoring server has the ip 192.168.10.71, but it will
> need to monitor devices on 192.168.0.x and 192.168.254.x etc. How and where
> would I need to add any additional routes? Below is the current routing
> table:
>
>
>
>  root at dev:/etc/rc.d/init.d# route
>  Kernel IP routing table
>  Destination     Gateway         Genmask         Flags Metric Ref    Use
> Iface
>  192.168.10.0    *               255.255.255.0   U     0      0        0
> eth0
>  169.254.0.0     *               255.255.0.0     U     0      0        0
> eth0
>  default         192.168.10.254  0.0.0.0         UG    0      0        0
> eth0
>  _______________________________________________
>  Discuss mailing list
>  Discuss at vlug.org
>  http://ladybug.vlug.org/cgi-bin/mailman/listinfo/discuss
>


More information about the Discuss mailing list