Skip to content

Instantly share code, notes, and snippets.

@sethsec
Last active June 26, 2022 23:05
Show Gist options
  • Save sethsec/8681383 to your computer and use it in GitHub Desktop.
Save sethsec/8681383 to your computer and use it in GitHub Desktop.
Interfaces file configured with eth0 and eth2 bonded as br0 (in promisc mode)
seth@sensor-dell:~$ uname -a
Linux sensor-dell 3.2.0-58-generic #88-Ubuntu SMP Tue Dec 3 17:37:58 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux
seth@sensor-dell:~$ history | grep bridge-utils
67 sudo apt-get install bridge-utils
seth@sensor-dell:~$ cat /etc/network/interfaces
# This configuration was created by the Security Onion setup script. The original network
# interface configuration file was backed up to /etc/networking/interfaces.bak.
# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).
# loopback network interface
auto lo
iface lo inet loopback
# Management network interface
auto eth1
iface eth1 inet static
address 192.168.0.202
gateway 192.168.0.1
netmask 255.255.255.0
dns-nameservers 8.8.8.8 8.8.4.4
auto eth0
iface eth0 inet manual
up ip link set eth0 promisc on arp off up
down ip link set eth0 promisc off down
post-up ethtool -G eth0 rx ; for i in rx tx sg tso ufo gso gro lro; do ethtool -K eth0 $i off; done
post-up echo 1 > /proc/sys/net/ipv6/conf/eth0/disable_ipv6
auto eth2
iface eth2 inet manual
up ip link set eth2 promisc on arp off up
down ip link set eth2 promisc off down
post-up ethtool -G eth2 rx ; for i in rx tx sg tso ufo gso gro lro; do ethtool -K eth2 $i off; done
post-up echo 1 > /proc/sys/net/ipv6/conf/eth2/disable_ipv6
auto br0
iface br0 inet manual
bridge_ports eth0 eth2
up ip link set br0 promisc on arp off up
down ip link set br0 promisc off down
post-up ethtool -G br0 rx ; for i in rx tx sg tso ufo gso gro lro; do ethtool -K br0 $i off; done
post-up echo 1 > /proc/sys/net/ipv6/conf/br0/disable_ipv6
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment