From owner-freebsd-questions  Mon Apr 14 12:47:45 1997
Return-Path: <owner-questions>
Received: (from root@localhost)
          by freefall.freebsd.org (8.8.5/8.8.5) id MAA09529
          for questions-outgoing; Mon, 14 Apr 1997 12:47:45 -0700 (PDT)
Received: from luke.cpl.net ([206.85.245.131])
          by freefall.freebsd.org (8.8.5/8.8.5) with ESMTP id MAA09521
          for <freebsd-questions@freebsd.org>; Mon, 14 Apr 1997 12:47:42 -0700 (PDT)
Received: from localhost (shawn@localhost) by luke.cpl.net (8.8.5/8.7.3) with SMTP id MAA05922; Mon, 14 Apr 1997 12:45:01 -0700 (PDT)
Date: Mon, 14 Apr 1997 12:45:00 -0700 (PDT)
From: Shawn Ramsey <shawn@luke.cpl.net>
To: Adrian Chadd <adrian@obiwan.aceonline.com.au>
cc: Anthony Barlow <tony@warp.co.uk>, freebsd-questions@freebsd.org
Subject: Re: ed0 promiscuous mode?
In-Reply-To: <Pine.BSF.3.95q.970414165019.1430A-100000@obiwan.aceonline.com.au>
Message-ID: <Pine.BSF.3.95.970414124425.5873A-100000@luke.cpl.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-questions@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

> > I just got in to work this morning and saw this on my terminal:
> 
> > 
> > Apr 13 15:06:43 temp1 /kernal: ed0: promiscuous mode enabled
> > 
> > What does it mean?
> > 
> 
> Just that. :)
> 
> It means this interface is now recieving all packets, and the kernel
> decides what to do with them :)
> 
> Usually its caused by people running 'tcpdump' .. however it COULD be
> packet-sniffer programs. Do you have the bpfilter compiled into your
> kernel?

I get the same thing with trafshow, which uses bpfilter.