Linux warns "device… entered promiscuous mode"

Modified on Mon, Sep 25, 2023 at 2:30 PM

On a system running the runZero Explorer, you may see console messages or log messages like this:

device enp0s3 entered promiscuous mode
device enp0s3 left promiscuous mode

These are not a cause for concern. When the runZero Explorer has traffic sampling enabled, it opens the network interface in a mode where it can listen to any passing traffic on the local subnet. This is known as "promiscuous mode". Once traffic sampling is paused or turned off, the interface is returned to regular mode.

Was this article helpful?

That’s Great!

Thank you for your feedback

Sorry! We couldn't be helpful

Thank you for your feedback

Let us know how can we improve this article!

Select at least one of the reasons
CAPTCHA verification is required.

Feedback sent

We appreciate your effort and will try to fix the article