Date: Sun, 15 Feb 1998 19:20:11 -0500 (EST) From: "Joe \"Marcus\" Clarke" <marcus@miami.edu> To: "David P. Klindt" <dklindt@ordata.com> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: BPF Assistance Message-ID: <Pine.OSF.3.96.980215191637.14874A-100000@jaguar.ir.miami.edu> In-Reply-To: <199802151615.QAA02228@cobra.ordata.com>
next in thread | previous in thread | raw e-mail | index | archive | help
You need to tell the kernel how many filters you want. I currently use 16...why, well, I shouldn't need more than that. Each filter allows a concurrent process to watch an interface. Just add the following line to your kernel config file: pseudo-device bpfilter x Where x is the number of filters you want. Once the kernel is installed, then you need to use a program like trafshow to get the ethernet card to enter promiscuous mode. Joe Clarke On Sun, 15 Feb 1998, David P. Klindt wrote: > Looking for some detail help about compiling a kernel to include the > bpf. This requirement has surfaced because I want to use nfr > (http://www.nfr.com) - a network management tool. To date, I have not > discovered any complete and accurate procedures for completing this > task. I have completed the following items do far - without success. > > 1. Have the following files in /usr/src/sys/net > bpf.c bpf.h bpf_compat.h bpf_filter.c bpfdesc.h > > 2. For lack of better understanding, placed in my kernel config file: > > pseudo-device bpf > > 3. In the /usr/src/sys/conf/files the following lines were was added: > > net/bpf.c optional bpfilter always-source > net/bpf_filter.c optional bpfilter > > 4. I have complied the kernel with no apparent errors. > > When I look at the /var/log/messages and see no indication the ether > net card has entered the promiscuous mode. > > I am hoping someone can provide me a place to look for a single source > answer to this procedures needed to complete this task. > > Best Regards > > dklindt@ordata.com > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.OSF.3.96.980215191637.14874A-100000>