From owner-freebsd-questions Tue Nov 28 08:26:24 1995 Return-Path: owner-questions Received: (from root@localhost) by freefall.freebsd.org (8.6.12/8.6.6) id IAA16311 for questions-outgoing; Tue, 28 Nov 1995 08:26:24 -0800 Received: from halloran-eldar.lcs.mit.edu (halloran-eldar.lcs.mit.edu [18.26.0.159]) by freefall.freebsd.org (8.6.12/8.6.6) with SMTP id IAA16303 for ; Tue, 28 Nov 1995 08:26:19 -0800 Received: by halloran-eldar.lcs.mit.edu; (5.65/1.1.8.2/19Aug95-0530PM) id AA03616; Tue, 28 Nov 1995 11:26:10 -0500 Date: Tue, 28 Nov 1995 11:26:10 -0500 From: "Garrett A. Wollman" Message-Id: <9511281626.AA03616@halloran-eldar.lcs.mit.edu> To: gpalmer@westhill.cdrom.com Cc: questions@freebsd.org Subject: Re: tcpdump bpf0 permissions In-Reply-To: <2353.817424060@westhill.cdrom.com> References: <2353.817424060@westhill.cdrom.com> Sender: owner-questions@freebsd.org Precedence: bulk < You need to compile the bpf into your kernel. It's not shipped > configured into the GENERIC kernel as it adds a considerable ammount > of bloat. Actuallly, no. It's not configured in GENERIC because it's a security hole big enough to drive a truck through. Only systems which are specifically configured to support BPF can usefully be put into promiscuous mode. -GAWollman -- Garrett A. Wollman | Shashish is simple, it's discreet, it's brief. ... wollman@lcs.mit.edu | Shashish is the bonding of hearts in spite of distance. Opinions not those of| It is a bond more powerful than absence. We like people MIT, LCS, ANA, or NSA| who like Shashish. - Claude McKenzie + Florent Vollant