sdnian 6 Posted October 13, 2016 Share Posted October 13, 2016 I've installed RDSensor for Linux version 1.0.1079.0. In the trace.log, it show the below error logs: 2016-10-13 09:46:23 Information: CPCAPDeviceSniffer [Thread 565fdb40]: CPCAPDeviceSniffer on enxb827eb718cf8 throwed error: Device open failed with error:enxb827eb718cf8: bind: Address family not supported by protocol 2016-10-13 09:46:33 Information: CPCAPDeviceSniffer [Thread 575ffb40]: CPCAPDeviceSniffer on lo throwed error: Device open failed with error:lo: bind: Address family not supported by protocol And it seems doesn't work because no detect any devices. OS: Ubuntu 16.04 x86 Kernel: 4.1.19-v7 Link to comment Share on other sites More sharing options...
ESET Staff MartinK 376 Posted October 13, 2016 ESET Staff Share Posted October 13, 2016 Rogue detection sensor will be attempting to "bind" with each network adapter it fins and it will try to listen for network traffic. This requires adapter to be configured in Promiscuous mode. Seems that there is problem with attaching to local loopback and interface called enxb827eb718cf8 which may or may not be problem with detection (in case there are multiple interfaces). Could you be more specific of used network adapters? Are there any other adapters except mentioned listed by ifconfig? Does your hardware (even virtual) support or enabled promiscuous operation? Are you using some non-standard IPv4/IPv6 configuration, for example have you disabled any of them? Link to comment Share on other sites More sharing options...
Recommended Posts