Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 28 Nov 1995 11:26:10 -0500
From:      "Garrett A. Wollman" <wollman@lcs.mit.edu>
To:        gpalmer@westhill.cdrom.com
Cc:        questions@freebsd.org
Subject:   Re: tcpdump bpf0 permissions 
Message-ID:  <9511281626.AA03616@halloran-eldar.lcs.mit.edu>
In-Reply-To: <2353.817424060@westhill.cdrom.com>
References:  <Pine.BSF.3.91.951126134547.19756A-100000@gcpacix.vcnet.com> <2353.817424060@westhill.cdrom.com>

next in thread | previous in thread | raw e-mail | index | archive | help
<<On Sun, 26 Nov 1995 14:14:20 -0800, gpalmer@westhill.cdrom.com said:

> You need to compile the bpf into your kernel. It's not shipped
> configured into the GENERIC kernel as it adds a considerable ammount
> of bloat.

Actuallly, no.  It's not configured in GENERIC because it's a security
hole big enough to drive a truck through.  Only systems which are
specifically configured to support BPF can usefully be put into
promiscuous mode.

-GAWollman

--
Garrett A. Wollman   | Shashish is simple, it's discreet, it's brief. ... 
wollman@lcs.mit.edu  | Shashish is the bonding of hearts in spite of distance.
Opinions not those of| It is a bond more powerful than absence.  We like people
MIT, LCS, ANA, or NSA| who like Shashish.  - Claude McKenzie + Florent Vollant



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?9511281626.AA03616>