From owner-freebsd-net@FreeBSD.ORG Sun Apr 18 20:46:52 2004 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5C28516A4CE for ; Sun, 18 Apr 2004 20:46:52 -0700 (PDT) Received: from cain.gsoft.com.au (cain.gsoft.com.au [203.31.81.10]) by mx1.FreeBSD.org (Postfix) with ESMTP id 88C3E43D46 for ; Sun, 18 Apr 2004 20:46:51 -0700 (PDT) (envelope-from doconnor@gsoft.com.au) Received: from inchoate.gsoft.com.au (localhost [127.0.0.1]) (authenticated bits=0) by cain.gsoft.com.au (8.12.11/8.12.10) with ESMTP id i3J3kmfH053773; Mon, 19 Apr 2004 13:16:48 +0930 (CST) (envelope-from doconnor@gsoft.com.au) From: "Daniel O'Connor" To: Brooks Davis Date: Mon, 19 Apr 2004 13:16:46 +0930 User-Agent: KMail/1.6.1 References: <200404191256.24225.doconnor@gsoft.com.au> <20040419033948.GA30320@Odin.AC.HMC.Edu> In-Reply-To: <20040419033948.GA30320@Odin.AC.HMC.Edu> MIME-Version: 1.0 Content-Disposition: inline Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <200404191316.46089.doconnor@gsoft.com.au> X-Spam-Score: -4.4 () CARRIAGE_RETURNS,IN_REP_TO,QUOTED_EMAIL_TEXT,REFERENCES,SPAM_PHRASE_00_01,USER_AGENT,USER_AGENT_KMAIL X-Scanned-By: MIMEDefang 2.16 (www . roaringpenguin . com / mimedefang) cc: freebsd-net@freebsd.org Subject: Re: Netgraph and non-ethernet nodes? X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Apr 2004 03:46:52 -0000 On Mon, 19 Apr 2004 13:09, Brooks Davis wrote: > On Mon, Apr 19, 2004 at 12:56:24PM +0930, Daniel O'Connor wrote: > > The recent emails about the bridge code from NetBSD made me interested in > > using netgraph to run snort on the combined traffic rather than having to > > run 2 copies (since we tunnel our class C using gif over IP over > > ethernet), however I can't see how to hook netgraph into a non-ethernet > > node :( > > > > Does anyone know if/how you can do it? (Specifically for gif) > > How about nf_gif(4)? Hmm, I see the man page, but no module.. Ahh, it doesn't appear to be built by default.. And it's not on my -stable box, guess I should do a manual merge :) Thanks for the hint :) -- Daniel O'Connor software and network engineer for Genesis Software - http://www.gsoft.com.au "The nice thing about standards is that there are so many of them to choose from." -- Andrew Tanenbaum GPG Fingerprint - 9A8C 569F 685A D928 5140 AE4B 319B 41F4 5D17 FDD5