Date: Thu, 2 Aug 2001 13:22:27 -0500 From: Dan Nelson <dnelson@emsphone.com> To: freebsd-questions@FreeBSD.ORG Subject: Re: Passive network interface? Message-ID: <20010802132227.A7110@dan.emsphone.com> In-Reply-To: <20010802110620.A62059@sigbus.com> References: <20010802083001.B61442@sigbus.com> <20010802122417.A8089@dan.emsphone.com> <20010802110620.A62059@sigbus.com>
next in thread | previous in thread | raw e-mail | index | archive | help
In the last episode (Aug 02), Charles Henrich said: > > In the last episode (Aug 02), Charles Henrich said: > > > Is there any provision in FreeBSD for turning an interface into a > > > monitor-only port, where none of the packets are processed by the > > > IP stack, and instead just used only by things like tcpdump? > > > > Don't ifconfig an IP onto it and you should be okay. > > I still see arp broadcast problems though (i.e. IP is on interface #1 > but got reply on interface 2) Theoretically you should be able to set the NOARP flag on the interface to stop that, but NOARP only seems to block ARP broadcasts, not reception. There should probably be a test added at the top of ip_arpinput() to handle that. For now, just set the log_arp_wrong_iface sysctl to 1 and the kernel warnings will stop. -- Dan Nelson dnelson@emsphone.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010802132227.A7110>