From owner-freebsd-hackers Wed Nov 8 2: 3:59 2000 Delivered-To: freebsd-hackers@freebsd.org Received: from mail.kyx.net (cr95838-b.crdva1.bc.wave.home.com [24.113.50.147]) by hub.freebsd.org (Postfix) with ESMTP id E909437B479; Wed, 8 Nov 2000 02:03:55 -0800 (PST) Received: from smp.kyx.net (unknown [10.22.22.45]) by mail.kyx.net (Postfix) with SMTP id 479291DC03; Wed, 8 Nov 2000 02:06:25 -0800 (PST) From: Dragos Ruiu Organization: kyx.net To: Kris Kennaway , Konrad Heuer Subject: Re: TCPDUMP patch v1.1 and AppleTalk Date: Wed, 8 Nov 2000 02:00:40 -0800 X-Mailer: KYX-CP/M [version core00-mail-92] Content-Type: text/plain Cc: freebsd-hackers@FreeBSD.ORG, freebsd-security@FreeBSD.ORG References: <20001107223959.B41350@citusc17.usc.edu> In-Reply-To: <20001107223959.B41350@citusc17.usc.edu> MIME-Version: 1.0 Message-Id: <0011080203080F.00551@smp.kyx.net> Content-Transfer-Encoding: 8bit Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Tue, 07 Nov 2000, Kris Kennaway wrote: > > On Tue, Nov 07, 2000 at 01:56:21PM +0100, Konrad Heuer wrote: > > > After patching and installing, tcpdump can't be used anymore since it puts > > very heavy load onto the network via xl0 and AppleTalk broadcast messages > > (one message each 0.2 ms). Sorry, in the moment I don't know more details > > ... > > tcpdump shouldn't be sending any appletalk packets, I thought (I may > be wrong, never used it on an appletalk network). Are you sure this is > the problem? I've never run this kind of a scenario here so I'm speaking from a vacuum of knowledge and pure conjecture... ;-) but could it be generating packets through name resolutions.... ??? Does it still generate the packets with -n ? cheers, --dr To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message