What does this mean [eth1]
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello everyone, Can someone give me a hit at what this means? using ps -aux |grep eth root 409 0.0 0.0 0 0 ? SW Apr13 0:01 [eth1] lsof |grep eth eth1 409 root cwd DIR 8,3 4096 2 / eth1 409 root rtd DIR 8,3 4096 2 / eth1 409 root 10u FIFO 8,3 90923 /dev/initctl I have googled but the only thing I find is from Romania and it talks about Promiscuous mode (shame I do not speak the lingo). I do not understand this, as this machine is only a GW/FireWall. Nothing running on eth1 to make it go into promiscuous mode except maybe mrtg but that checks the interfaces for tfc. Ian - -- A child of five would understand this. Send someone to fetch a child of five. Groucho Marx - ---------------------------------------------------- This mail has been scanned for virus by AntiVir for UNIX Copyright (C) 1994-2003 by H+BEDV Datentechnik GmbH. PGP ID: 589F8449 Fingerprint: EB1C FACF 6BEB 540E 8AC0 F04E 2A25 A2F1 589F 8449 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE+2+G2KiWi8VifhEkRAvKdAJ92HUEWVrhIWYCdDCg1XKsXocZp0wCdFc/L /EUV7i1d35wgFA27X5eZzR4= =WSup -----END PGP SIGNATURE-----
Is it a Realtek 8139 perhaps? Then this is normal behaviour of the 8139too driver. Thomas Ian David Laws wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Hello everyone,
Can someone give me a hit at what this means? using ps -aux |grep eth root 409 0.0 0.0 0 0 ? SW Apr13 0:01 [eth1]
lsof |grep eth
eth1 409 root cwd DIR 8,3 4096 2 / eth1 409 root rtd DIR 8,3 4096 2 / eth1 409 root 10u FIFO 8,3 90923 /dev/initctl
I have googled but the only thing I find is from Romania and it talks about Promiscuous mode (shame I do not speak the lingo). I do not understand this, as this machine is only a GW/FireWall. Nothing running on eth1 to make it go into promiscuous mode except maybe mrtg but that checks the interfaces for tfc.
Ian
- -- A child of five would understand this. Send someone to fetch a child of five. Groucho Marx
- ---------------------------------------------------- This mail has been scanned for virus by AntiVir for UNIX Copyright (C) 1994-2003 by H+BEDV Datentechnik GmbH. PGP ID: 589F8449 Fingerprint: EB1C FACF 6BEB 540E 8AC0 F04E 2A25 A2F1 589F 8449 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org
iD8DBQE+2+G2KiWi8VifhEkRAvKdAJ92HUEWVrhIWYCdDCg1XKsXocZp0wCdFc/L /EUV7i1d35wgFA27X5eZzR4= =WSup -----END PGP SIGNATURE-----
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Tuesday 03 June 2003 08:18, Joebstl Thomas wrote:
Is it a Realtek 8139 perhaps? Yes
Then this is normal behaviour of the 8139too driver.
but why does it do that, does it mean that it is in promiscuous mode or not?
Thomas
Ian David Laws wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 <snip>
- -- A child of five would understand this. Send someone to fetch a child of five. Groucho Marx - ---------------------------------------------------- This mail has been scanned for virus by AntiVir for UNIX Copyright (C) 1994-2003 by H+BEDV Datentechnik GmbH. PGP ID: 589F8449 Fingerprint: EB1C FACF 6BEB 540E 8AC0 F04E 2A25 A2F1 589F 8449 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE+3FoBKiWi8VifhEkRAoWDAJ4/3RCg3W0FNZSqb6+mMt+jRtNj5QCfTohZ AoOG0vQQb9y8qbDpn2OOhOo= =/KP8 -----END PGP SIGNATURE-----
On Tue, Jun 03, 2003 at 10:19:03AM +0200, Ian David Laws wrote:
Then this is normal behaviour of the 8139too driver.
but why does it do that, does it mean that it is in promiscuous mode or not?
No, the driver starts a kernel thread that does the negotiation of link capabilities. This is the process you're seeing. On my box, it looks like this: # ps lp 361 F UID PID PPID PRI NI VSZ RSS WCHAN STAT TTY TIME COMMAND 002 0 361 1 15 0 0 0 schedu SW ? 0:00 [eth0] Look at the VSZ and RSS fields - they're zero, indication that this process doesn't have any virtual memory or executable associated. OTOH the state is not Z(ombie). This usually means it's a kernel thread. Olaf -- Olaf Kirch | Anyone who has had to work with X.509 has probably okir@suse.de | experienced what can best be described as ---------------+ ISO water torture. -- Peter Gutmann
That cant be determined by that info, it's just that the driver creates its own process (some people say the cards suck because of that and that they can be real cpu hogs) - it doesnt say anything about the nic running in promisc. mode or not. Only source would be /var/log/messages or dmesg : Jun 3 10:45:36 p90 kernel: device eth0 entered promiscuous mode Jun 3 10:45:40 p90 kernel: device eth0 left promiscuous mode I thought ifconfig shows it as well but apparently it doesnt or I dont find the proper switch. Thomas Ian David Laws wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On Tuesday 03 June 2003 08:18, Joebstl Thomas wrote:
Is it a Realtek 8139 perhaps?
Yes
Then this is normal behaviour of the 8139too driver.
but why does it do that, does it mean that it is in promiscuous mode or not?
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Tuesday 03 June 2003 10:53, Olaf Kirch wrote:
On Tue, Jun 03, 2003 at 10:19:03AM +0200, Ian David Laws wrote:
Then this is normal behaviour of the 8139too driver.
<snip>
I thank you for your answers. I have a SMP computer and I do not worry about CPU being hogged up. Linux version 2.4.18-4GB-SMP (root@SMP_X86.suse.de) (gcc version 2.95.3 20010315 (SuSE)) #1 SMP Wed Mar 27 13:56:04 UTC 2002 - -- A child of five would understand this. Send someone to fetch a child of five. Groucho Marx - ---------------------------------------------------- This mail has been scanned for virus by AntiVir for UNIX Copyright (C) 1994-2003 by H+BEDV Datentechnik GmbH. PGP ID: 589F8449 Fingerprint: EB1C FACF 6BEB 540E 8AC0 F04E 2A25 A2F1 589F 8449 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE+3GxxKiWi8VifhEkRAjcTAJ9mIjwPC4Nb2IygPJwUMv0jSTe9oQCgkCWF BHbVrE9QqhPUPprRfWgdqLQ= =Q7x9 -----END PGP SIGNATURE-----
participants (3)
-
Ian David Laws -
Joebstl Thomas -
Olaf Kirch