Date: Tue, 04 Dec 2007 16:25:01 -0800 From: Peter Losher <Peter_Losher@isc.org> To: freebsd-net@freebsd.org Subject: Aggregating many ports into one for tcpdump server. Message-ID: <4755EFDD.8070609@isc.org>
next in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enig5466A11A35F232082E81044C
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
I am currently working on a tcpdump collector where we have multiple
feeds coming in (via bge{0-8}). Since tcpdump can only poll one
interface per process, I was hoping to aggregate the traffic onto one
pseudo-interface for tcpdump to hold onto and to poll.
Looking thru the archives, it seems ng_one2many (in this case
'many2one') is what I am looking for. Am I barking the right tree here?
Best Wishes - Peter
--=20
Peter_Losher@isc.org | ISC | OpenPGP 0xE8048D08 | "The bits must flow"
--------------enig5466A11A35F232082E81044C
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (Darwin)
iD8DBQFHVe/dPtVx9OgEjQgRAnYdAJ9fzrD6Ycyjuxm6XIXhHuadHT5d9QCfY/Zn
enEXQlGBaYdka3D23UfNaMw=
=aVb3
-----END PGP SIGNATURE-----
--------------enig5466A11A35F232082E81044C--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4755EFDD.8070609>