From owner-freebsd-net@FreeBSD.ORG Wed Dec 5 00:25:03 2007 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 64E2316A41B for ; Wed, 5 Dec 2007 00:25:03 +0000 (UTC) (envelope-from Peter_Losher@isc.org) Received: from mx.isc.org (mx.isc.org [IPv6:2001:4f8:0:2::1c]) by mx1.freebsd.org (Postfix) with ESMTP id 499BA13C44B for ; Wed, 5 Dec 2007 00:25:03 +0000 (UTC) (envelope-from Peter_Losher@isc.org) Received: from farside.isc.org (farside.isc.org [IPv6:2001:4f8:3:bb::5]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "farside.isc.org", Issuer "ISC CA" (verified OK)) by mx.isc.org (Postfix) with ESMTP id AE13F11407E for ; Wed, 5 Dec 2007 00:25:01 +0000 (UTC) (envelope-from Peter_Losher@isc.org) Received: from manx.isc.org (manx.isc.org [IPv6:2001:4f8:3:bb::37]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by farside.isc.org (Postfix) with ESMTP id 33B55E6056 for ; Wed, 5 Dec 2007 00:25:02 +0000 (UTC) (envelope-from Peter_Losher@isc.org) Message-ID: <4755EFDD.8070609@isc.org> Date: Tue, 04 Dec 2007 16:25:01 -0800 From: Peter Losher Organization: ISC User-Agent: Thunderbird 2.0.0.9 (Macintosh/20071031) MIME-Version: 1.0 To: freebsd-net@freebsd.org X-Enigmail-Version: 0.95.5 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="------------enig5466A11A35F232082E81044C" Subject: Aggregating many ports into one for tcpdump server. X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 05 Dec 2007 00:25:03 -0000 This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig5466A11A35F232082E81044C Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable I am currently working on a tcpdump collector where we have multiple feeds coming in (via bge{0-8}). Since tcpdump can only poll one interface per process, I was hoping to aggregate the traffic onto one pseudo-interface for tcpdump to hold onto and to poll. Looking thru the archives, it seems ng_one2many (in this case 'many2one') is what I am looking for. Am I barking the right tree here? Best Wishes - Peter --=20 Peter_Losher@isc.org | ISC | OpenPGP 0xE8048D08 | "The bits must flow" --------------enig5466A11A35F232082E81044C Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) iD8DBQFHVe/dPtVx9OgEjQgRAnYdAJ9fzrD6Ycyjuxm6XIXhHuadHT5d9QCfY/Zn enEXQlGBaYdka3D23UfNaMw= =aVb3 -----END PGP SIGNATURE----- --------------enig5466A11A35F232082E81044C--