From owner-freebsd-questions@FreeBSD.ORG Thu Aug 21 10:07:00 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D0EF316A4BF for ; Thu, 21 Aug 2003 10:07:00 -0700 (PDT) Received: from mail.messagingengine.com (out1.smtp.messagingengine.com [66.111.4.25]) by mx1.FreeBSD.org (Postfix) with ESMTP id DC7764400D for ; Thu, 21 Aug 2003 10:06:57 -0700 (PDT) (envelope-from freebsd@soith.com) Received: from www.fastmail.fm (localhost [127.0.0.1]) by localhost.localdomain (Postfix) with ESMTP id 0F63F11E265 for ; Thu, 21 Aug 2003 13:06:57 -0400 (EDT) Received: from 10.202.2.132 ([10.202.2.132] helo=www.fastmail.fm) by messagingengine.com with SMTP; Thu, 21 Aug 2003 13:06:57 -0400 Received: by www.fastmail.fm (Postfix, from userid 99) id 1171437FC3; Thu, 21 Aug 2003 13:06:55 -0400 (EDT) Content-Disposition: inline Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="ISO-8859-1" MIME-Version: 1.0 X-Mailer: MIME::Lite 1.2 (F2.71; T1.001; A1.51; B2.12; Q2.03) From: "Aaron Wohl" To: questions@freebsd.org Date: Thu, 21 Aug 2003 11:06:55 -0600 X-Epoch: 1061485617 X-Sasl-enc: 3ZbQ6B7su0nA6yVhtNDq4A Message-Id: <20030821170655.1171437FC3@www.fastmail.fm> Subject: hubs and promiscuous packet listening X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Aug 2003 17:07:01 -0000 Does anyone know the model number of a cheap hub to use when packet sniffing? The two suposed hubs I have seem to be blocking packets not addressed to me same as a switch would... I'm trying tcpdump and ipgrab as root via a hub to listen to anouther computer. The interface is going into promiscuous mode as ifconfig shows: fxp0: flags=8943 mtu 1500 But I cant see any traffic for the other machines on the hub. I tried listening on a linux box on the same hub with the same problem... I tried a second hub, same problem. One hub is a linksys EFAH05W the other is a linksys NH1005. I was wondering if linksys labeled a hub because only one packet can pass thru it and a time and it has no buffereing but its still not spamming each packet out all the ports like I want it to do for debugging?