From owner-freebsd-net Thu Nov 15 12:53:39 2001 Delivered-To: freebsd-net@freebsd.org Received: from willers.employees.org (willers.employees.org [128.107.241.167]) by hub.freebsd.org (Postfix) with ESMTP id 61CB437B405 for ; Thu, 15 Nov 2001 12:53:36 -0800 (PST) Received: from localhost (cjtt@localhost) by willers.employees.org (8.11.5/8.11.5) with SMTP id fAFKrZG16725 for ; Thu, 15 Nov 2001 12:53:35 -0800 (PST) Date: Thu, 15 Nov 2001 12:53:35 -0800 (PST) From: CJTT To: freebsd-net@freebsd.org Subject: ti driver, vlan and tcpdump Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org While sending some test traffic to a FreeBSD 4.4 (cvsupped yesterday), I noticed that tcpdump doesn't seem to see VLAN traffic received on the ti card as it does on the fxp card. (however, tcpdump on the sending ti card sees the traffic leave). tcpdump with non-VLAN traffic on receive side: -------------------------------------------- freebsd2# tcpdump -ne -i ti0 tcpdump: listening on ti0 15:53:53.181924 0:60:8:f5:c5:32 ff:ff:ff:ff:ff:ff 0806 60: arp who-has 10.10.10.10 tell 10.10.10.11 15:53:53.181936 0:60:8:f5:e9:6c 0:60:8:f5:c5:32 0806 60: arp reply 10.10.10.10 is-at 0:60:8:f5:e9:6c 15:53:53.182313 0:60:8:f5:c5:32 0:60:8:f5:e9:6c 0800 60: 10.10.10.11.8888 > 10.10.10.10.8888: udp 18 15:53:53.281997 0:60:8:f5:c5:32 0:60:8:f5:e9:6c 0800 60: 10.10.10.11.8888 > 10.10.10.10.8888: udp 18 VLAN traffic on sending side (receive side sees nothing): ---------------------------------------------------------- arma# tcpdump -ne -i ti0 tcpdump: listening on ti0 15:42:10.776655 0:60:8:f5:c5:32 0:60:8:f5:e9:6c 8100 64: 802.1Q vlan#1 P0 10.10.10.11.8888 > 10.10.10.10.8888: udp 18 15:42:10.876631 0:60:8:f5:c5:32 0:60:8:f5:e9:6c 8100 64: 802.1Q vlan#1 P0 10.10.10.11.8888 > 10.10.10.10.8888: udp 18 15:42:10.976630 0:60:8:f5:c5:32 0:60:8:f5:e9:6c 8100 64: 802.1Q vlan#1 P0 10.10.10.11.8888 > 10.10.10.10.8888: udp 18 Now if I run the same test with the fxp card, the receiving side sees the traffic just fine: freebsd2# tcpdump -ne -i fxp1 tcpdump: listening on fxp1 16:07:42.697724 0:d0:b7:9e:dd:5b 0:d0:b7:9e:df:a2 8100 64: 802.1Q vlan#1 P0 20.20.20.21.8888 > 20.20.20.20.8888: udp 18 16:07:42.797717 0:d0:b7:9e:dd:5b 0:d0:b7:9e:df:a2 8100 64: 802.1Q vlan#1 P0 20.20.20.21.8888 > 20.20.20.20.8888: udp 18 16:07:42.897712 0:d0:b7:9e:dd:5b 0:d0:b7:9e:df:a2 8100 64: 802.1Q vlan#1 P0 20.20.20.21.8888 > 20.20.20.20.8888: udp 18 16:07:42.997713 0:d0:b7:9e:dd:5b 0:d0:b7:9e:df:a2 8100 64: 802.1Q vlan#1 P0 20.20.20.21.8888 > 20.20.20.20.8888: udp 18 Why do the two cards behave differently with regard to tcpdump (libpcap)? I need to be able to see the VLAN traffic without configuring VLANs (in a test lab). Thanks, CJ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message