From owner-freebsd-hackers  Sun Jan  5 13:38:11 1997
Return-Path: <owner-hackers>
Received: (from root@localhost)
          by freefall.freebsd.org (8.8.4/8.8.4) id NAA15775
          for hackers-outgoing; Sun, 5 Jan 1997 13:38:11 -0800 (PST)
Received: from rover.village.org (rover.village.org [204.144.255.49])
          by freefall.freebsd.org (8.8.4/8.8.4) with SMTP id NAA15770
          for <hackers@freebsd.org>; Sun, 5 Jan 1997 13:38:07 -0800 (PST)
Received: from rover.village.org [127.0.0.1] 
	by rover.village.org with esmtp (Exim 0.56 #1)
	id E0vh0Gc-0002vs-00; Sun, 5 Jan 1997 14:38:06 -0700
To: hackers@freebsd.org
Subject: Got a strange one...
Date: Sun, 05 Jan 1997 14:38:06 -0700
From: Warner Losh <imp@village.org>
Message-Id: <E0vh0Gc-0002vs-00@rover.village.org>
Sender: owner-hackers@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk


Is there a way to enable bpf on only one interface of a system?  I
have a secure net and an insecure net with a machine sitting on both.
There is no routing between the two at this time (eg gateway is set to
0).  I have a need to sniff packets on my insecure net (err, ummm,
rarpd has this need) and I was wondering if there would be some way to
only enable bpf on the ed1 interface, while leaving it disabled on the
ed0 interface.

Thanks a bunch for any help that you might be able to render...

Warner