Kernel hack????
Today when I checked my logs with logwatch,under kernel sctioin I found this:
--------------------- Kernel Begin ------------------------
4 Time(s): device eth0 entered promiscuous mode
4 Time(s): device eth0 left promiscuous mode
---------------------- Kernel End -------------------------
I am not very sure but some sniffer tool has been installed and compiled on my server,which is why my network card is going and coming out of promiscuous mode.
But what should I do?Is there any way to detect what's wrong on my server?
PLease let me know!!!
Thank you.
