
Module: mod_if
Author: Brian Wotring (brian@hostintegrity.com)



DESCRIPTION:

The mod_if module is designed originally to monitor the promisc flag
on network interfaces, but quickly turned into being able to monitor
various aspects of network interfaces including hardware address,
IP address, broadcast, MTU, and metric.

This module is somewhat different in that each record is an element
about a network interface as opposed to one record per interface. This
will make it easier to add more elements to be monitored, easier to
filter, and easier to understand alerts.

USE:

To use this module, all  that is needed is to include it in the Modules
block of a scan configuration, e.g.:

    <Modules>
    ...
    Include mod_if
    ...
    </Modules>


PARAMETERS:

There are no parameters for this module.

PLATFORMS:

Currently, this module is only implemented for Linux.    

NOTES:



