From owner-freebsd-isp@FreeBSD.ORG Thu Jul 27 11:35:09 2006 Return-Path: X-Original-To: freebsd-isp@freebsd.org Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id F37CD16A4DD for ; Thu, 27 Jul 2006 11:35:08 +0000 (UTC) (envelope-from cswiger@mac.com) Received: from pi.codefab.com (pi.codefab.com [199.103.21.227]) by mx1.FreeBSD.org (Postfix) with ESMTP id E8DE843D55 for ; Thu, 27 Jul 2006 11:35:04 +0000 (GMT) (envelope-from cswiger@mac.com) Received: from localhost (localhost [127.0.0.1]) by pi.codefab.com (Postfix) with ESMTP id 1FA485CC5; Thu, 27 Jul 2006 07:35:04 -0400 (EDT) X-Virus-Scanned: amavisd-new at codefab.com Received: from pi.codefab.com ([127.0.0.1]) by localhost (pi.codefab.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kkcXsHu0n+LF; Thu, 27 Jul 2006 07:35:03 -0400 (EDT) Received: from [192.168.1.251] (pool-68-161-117-245.ny325.east.verizon.net [68.161.117.245]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by pi.codefab.com (Postfix) with ESMTP id C45EB5C12; Thu, 27 Jul 2006 07:35:02 -0400 (EDT) Message-ID: <44C8A4D9.6050506@mac.com> Date: Thu, 27 Jul 2006 07:34:49 -0400 From: Chuck Swiger User-Agent: Thunderbird 1.5.0.4 (Windows/20060516) MIME-Version: 1.0 To: User Ernie References: <200607270703.k6R73QiL054580@puremail.eis.net.au> In-Reply-To: <200607270703.k6R73QiL054580@puremail.eis.net.au> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-isp@freebsd.org Subject: Re: fprobe on multiple ethernet interfaces X-BeenThere: freebsd-isp@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Internet Services Providers List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Jul 2006 11:35:09 -0000 User Ernie wrote: > I am trying to use fprobe to capture netflow data on multiple ethernet > interfaces at once, the man page says you use the keyword 'any' as the interface > name, when I do that I get the following error in the logs and fprobe wont > start: The use of the keyword "any" is a Linux-ism that doesn't work on FreeBSD, OS X, Solaris, etc. On the other hand, being a little more selective of which interface you are sniffing on is not a bad idea, anyway... -- -Chuck