Imperva Cyber Community

communities_1.jpg
 View Only
Back to discussions
Expand all | Collapse all

Is it possible to modify the sniffing interface settings in a command or file?

  • 1.  Is it possible to modify the sniffing interface settings in a command or file?

    Posted 05-24-2024 05:04

    Is it possible to modify the sniffing interface settings in a command or file? 

    The following situation has occurred. 

    Two interfaces on the gateway in sniffing mode were set to sniffing interface to detect traffic on both interfaces. (There was not configured reset interface!)
    With the arrival of EOS, we upgraded from version 13.6.0.87 to version 14.7.0.50. 

    After the upgrade, I checked that one of the two interfaces has changed to the 'pending' state. 

    What we suspect is that this situation might have occurred because one interface was set in impcfg and the other interface was modified in the command line. 

    The previous history is unknown because the workers are different.

    Thank you


    #On-PremisesWAF(formerlySecuresphere)

    ------------------------------
    Sunghyuck Jang
    engineer
    Cybertek holdings Inc
    Seoul
    ------------------------------


  • 2.  RE: Is it possible to modify the sniffing interface settings in a command or file?

    Posted 06-10-2024 06:53

    correct way is to use impcfg tool for such configuration, or impctl commands as a CLI alternative. Using Linux commands (if this is what you mean by command line) is not recommended as might cause improper work of the system. 



    ------------------------------
    Marat Makhlin
    Imperva
    On-Prem Technical Lead
    ------------------------------

    Original Message