From owner-freebsd-net@FreeBSD.ORG  Wed Jul  5 17:09:33 2006
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
X-Original-To: freebsd-net@freebsd.org
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id E120216A4E2
	for <freebsd-net@freebsd.org>; Wed,  5 Jul 2006 17:09:33 +0000 (UTC)
	(envelope-from vladgalu@gmail.com)
Received: from nf-out-0910.google.com (nf-out-0910.google.com [64.233.182.186])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 4D07543D49
	for <freebsd-net@freebsd.org>; Wed,  5 Jul 2006 17:09:32 +0000 (GMT)
	(envelope-from vladgalu@gmail.com)
Received: by nf-out-0910.google.com with SMTP id x37so1636166nfc
	for <freebsd-net@freebsd.org>; Wed, 05 Jul 2006 10:09:31 -0700 (PDT)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com;
	h=received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition;
	b=EFzV3BxVXnTtbKiUJa0rk7kPkg+Kv/efjYIcA8gNuD82C5uJcKPWOqEGa7QAJNuWrko+6/45lEzCfbjqYiJbACCoScyzPtdq+LAYTF/Cr9fP8EPUgUAInXLBMsxQ/IFR2j8vAeCcKxradpwTRvIL9ZfUFZSN7nA6RMLRHJml26g=
Received: by 10.48.243.16 with SMTP id q16mr4076819nfh;
	Wed, 05 Jul 2006 10:09:31 -0700 (PDT)
Received: by 10.48.250.2 with HTTP; Wed, 5 Jul 2006 10:09:31 -0700 (PDT)
Message-ID: <79722fad0607051009r4cd6a23bh8923b4aa844c6e40@mail.gmail.com>
Date: Wed, 5 Jul 2006 20:09:31 +0300
From: "Vlad GALU" <vladgalu@gmail.com>
To: freebsd-net@freebsd.org
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Subject: bpf seeing non-local traffic on lo0
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 05 Jul 2006 17:09:34 -0000

     I was debugging a dspam->clamav connection and I saw two packets
which didn't belong to the loopback interface. The destination IP was
assigned to one of the physical interfaces, and the source IP was
somewhere on the internet. I've no idea how to reproduce it.

-- 
If it's there, and you can see it, it's real.
If it's not there, and you can see it, it's virtual.
If it's there, and you can't see it, it's transparent.
If it's not there, and you can't see it, you erased it.