Keyboard shortcuts

Press ← or → to navigate between chapters

Press S or / to search in the book

Press ? to show this help

Press Esc to hide this help

Active and Passive Rcore

We often speak of the Rcore being in active or passive mode. These are generalizations of categories of configurations.

  • Active: An Rcore configured to be active will inject custom Eternet frames.
  • Passive: An Rcore configured to be passive will not allow phantom activation. That is, it will not inject forged Ethernet frames.
  • Silent: An Rcore configured to be silent will not inject any Ethernet frames. If the Rcore is running in silent mode, then you probably do not want the Surface service running.

If you do not have accurate documentation or knowledge of your network, then you may want to start with a silent mode to get a feel for how your network is operating now. Once you have a better understanding of the network you can move on to passive mode, and then ultimately active mode.

Active Settings

The Rcore options that make it active are:

  • --echo-arp-request
  • --phantom-arp
  • --phantom-icmp
  • --pahntom-tcp

Passive Settings

The Rcore options that make it passive are:

  • --echo-arp-request

Silent Settings

To make the Rcore silent, do not include any of the settings used for active or passive modes.