From owner-freebsd-questions Fri May 18 0:30:12 2001 Delivered-To: freebsd-questions@freebsd.org Received: from mail.freebsd-corp-net-guide.com (mail.freebsd-corp-net-guide.com [206.29.169.15]) by hub.freebsd.org (Postfix) with ESMTP id 2596E37B423 for ; Fri, 18 May 2001 00:30:03 -0700 (PDT) (envelope-from tedm@toybox.placo.com) Received: from tedm.placo.com (nat-rtr.freebsd-corp-net-guide.com [206.29.168.154]) by mail.freebsd-corp-net-guide.com (8.11.1/8.11.1) with SMTP id f4I7Tuk56011; Fri, 18 May 2001 00:29:56 -0700 (PDT) (envelope-from tedm@toybox.placo.com) From: "Ted Mittelstaedt" To: "Will Andrews" , Subject: RE: Promiscuous mode? Date: Fri, 18 May 2001 00:29:56 -0700 Message-ID: <005001c0df6c$56820f00$1401a8c0@tedm.placo.com> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook 8.5, Build 4.71.2173.0 X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3155.0 In-Reply-To: <20010518012637.Q26877@casimir.physics.purdue.edu> Importance: Normal Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: X-Loop: FreeBSD.ORG Under FreeBSD, programs like trafshow are "bpf clients" they use the bpf interface which puts the card in promiscious mode. In your scheme, however, that hub that the DSL line is connected to and that the BSD box and the other computers are connected to, it MUST be a flat hub, NOT a switch. Switches will normally prevent all the traffic from being seen. As long as it's a hub you will be fine. the snmp daemon only looks at traffic that is directed to the computer, not at all traffic on the Ethernet. BTW, what is the DSL CPE that your using to connect to the DSL line? Some of the CPE's have SNMP in them and can give you traffic stats that you can track with a program like MRTG. Ted Mittelstaedt tedm@toybox.placo.com Author of: The FreeBSD Corporate Networker's Guide Book website: http://www.freebsd-corp-net-guide.com >-----Original Message----- >From: owner-freebsd-questions@FreeBSD.ORG >[mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of Will Andrews >Sent: Thursday, May 17, 2001 11:27 PM >To: questions@FreeBSD.ORG >Subject: Promiscuous mode? > > >Hello, > >I'm trying to graph the usage of a DSL line which is connected to a hub, >to which several computers are connected to. However, since the traffic >is not going through my computer, I need to figure out a way to have it >watch all the traffic on the hub, and from what I understand, I need to >put the NIC in promiscuous mode. So the first question would be: how do >I put it in promiscuous mode 100% of the time, besides starting a >sniffer like tcpdump et al? I couldn't find anything in ifconfig(8) to >do that. > >Then the second question would be: would net-snmp (daemon) actually be >looking at all the traffic? The reason I ask is because it appears that >traffic not destined for the NIC's MAC isn't shown to anyone but root. >Though I suppose that doesn't matter since the SNMP daemon is running as >root... > >TIA, >-- >wca >P.S. Please keep me on Cc:, I'm not subscribed to questions@. > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message