From owner-freebsd-net@FreeBSD.ORG Fri Aug 19 22:29:18 2005 Return-Path: X-Original-To: freebsd-net@freebsd.org Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 0396716A41F for ; Fri, 19 Aug 2005 22:29:18 +0000 (GMT) (envelope-from paul@distributel.net) Received: from smtp.distributel.net (cns2.distributel.NET [66.38.181.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id A09A243D45 for ; Fri, 19 Aug 2005 22:29:17 +0000 (GMT) (envelope-from paul@distributel.net) Received: from localhost (localhost [127.0.0.1]) by smtp.distributel.net (8.12.6/8.12.6) with ESMTP id j7JMTECi048460; Fri, 19 Aug 2005 18:29:14 -0400 (EDT) Date: Fri, 19 Aug 2005 18:29:14 -0400 (EDT) From: Paul Khavkine X-X-Sender: paul@krusty.mtl.distributel.net To: Julian Elischer In-Reply-To: <4306462A.2070500@elischer.org> Message-ID: <20050819182437.R47954-100000@krusty.mtl.distributel.net> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Cc: freebsd-net@freebsd.org Subject: Re: Reading raw ethernet X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Aug 2005 22:29:18 -0000 On Fri, 19 Aug 2005, Julian Elischer wrote: >Paul Khavkine wrote: >> Hi guys. >> >> >> I'm writing a small program to read raw ethernet frames out of netgraph >> to capture Spannign Tree packets from the switch. >> >> Is it possible to pick up STP frames without putting the interface in >> promiscuous mode ? > >If you don't put it in promiscuous mode, then you will only see broadcast >packets and packets aimed at you specifically. > >If that's enough then there is nothing in netgraph that insists that >you turn on promiscuous mode. Well STP packets are sent to a well known MAC address (multicast?) so i can't see it if the card is not in promisc mode. I'm not exactly sure if it's good or not to leave it in promisc mode all the time, is there any security/performance issues with that on a busy server? I want to read STP packets to monitor the link with the switch, if i can't hear the switch for X amount oof time, failover to another NIC. Is it possible to have more then one MAC on a NIC ? I have bge and em cards. > >You should probably look at the ng_etf node too BTW. How does ng_etf deal with that ? Thanx Paul > > >> >> Thanx >> Paul >> >> ************************************************ >> Paul Khavkine >> Networks/Systems Planning and Engineering >> DISTRIBUTEL Communications. >> 740 Notre Dame West, Suite 1135 >> Montreal, Quebec, Canada, H3C 3X6 >> +1-514-877-5505 x 263 >> http://www.distributel.net >> ************************************************ >> >> _______________________________________________ >> freebsd-net@freebsd.org mailing list >> http://lists.freebsd.org/mailman/listinfo/freebsd-net >> To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" > > ************************************************ Paul Khavkine Networks/Systems Planning and Engineering DISTRIBUTEL Communications. 740 Notre Dame West, Suite 1135 Montreal, Quebec, Canada, H3C 3X6 +1-514-877-5505 x 263 http://www.distributel.net ************************************************