From owner-freebsd-questions  Sun Feb 15 16:20:43 1998
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id QAA22604
          for freebsd-questions-outgoing; Sun, 15 Feb 1998 16:20:43 -0800 (PST)
          (envelope-from owner-freebsd-questions@FreeBSD.ORG)
Received: from jaguar.ir.miami.edu (jaguar.ir.miami.edu [129.171.32.10])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id QAA22597
          for <freebsd-questions@FreeBSD.ORG>; Sun, 15 Feb 1998 16:20:29 -0800 (PST)
          (envelope-from marcus@miami.edu)
Received: from localhost by jaguar.ir.miami.edu (PMDF V5.1-10 #24029)
 with SMTP id <0EOG00B013LNHN@jaguar.ir.miami.edu> for
 freebsd-questions@FreeBSD.ORG; Sun, 15 Feb 1998 19:20:11 -0500 (EST)
Date: Sun, 15 Feb 1998 19:20:11 -0500 (EST)
From: "Joe \"Marcus\" Clarke" <marcus@miami.edu>
Subject: Re: BPF  Assistance
In-reply-to: <199802151615.QAA02228@cobra.ordata.com>
To: "David P. Klindt" <dklindt@ordata.com>
Cc: freebsd-questions@FreeBSD.ORG
Message-id: <Pine.OSF.3.96.980215191637.14874A-100000@jaguar.ir.miami.edu>
MIME-version: 1.0
Content-type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

You need to tell the kernel how many filters you want.  I currently use
16...why, well, I shouldn't need more than that.  Each filter allows a
concurrent process to watch an interface.  Just add the following line
to your kernel config file:

pseudo-device bpfilter x

Where x is the number of filters you want.  Once the kernel is
installed, then you need to use a program like trafshow to get the
ethernet card to enter promiscuous mode.

Joe Clarke

On Sun, 15 Feb 1998, David P. Klindt wrote:

> Looking for some detail help about compiling a kernel to include the
> bpf. This requirement has surfaced because I want to use nfr  
> (http://www.nfr.com)  - a network management tool. To date, I have not
> discovered any complete and accurate procedures for completing this
> task. I have completed the following items do far - without success.
> 
> 1. Have the following files in /usr/src/sys/net
>         bpf.c  bpf.h  bpf_compat.h   bpf_filter.c  bpfdesc.h
> 
> 2. For lack of better understanding, placed in my kernel config file:
> 
>         pseudo-device   bpf
> 
> 3. In the /usr/src/sys/conf/files the following lines were was added:
> 
>         net/bpf.c               optional bpfilter always-source
>         net/bpf_filter.c        optional bpfilter
> 
> 4. I have complied the kernel with no apparent errors.
> 
> When I look at the /var/log/messages and see no indication the ether
> net card has entered the promiscuous mode.
> 
> I am hoping someone can provide me a place to look for a single source
> answer to this procedures needed to complete this task.
> 
> Best Regards
> 
> dklindt@ordata.com
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
> 


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message