From owner-freebsd-ipfw@FreeBSD.ORG Sat Jan 8 21:15:26 2005 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 460A716A583 for ; Sat, 8 Jan 2005 21:15:26 +0000 (GMT) Received: from r2d2.bromirski.net (r2d2.bromirski.net [217.153.57.194]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7263943D48 for ; Sat, 8 Jan 2005 21:15:25 +0000 (GMT) (envelope-from lbromirski@mr0vka.eu.org) Received: from [127.0.0.1] (shield.wesola.pl [62.111.150.246]) by r2d2.bromirski.net (Postfix) with ESMTP id E65C3108D66 for ; Sat, 8 Jan 2005 22:15:22 +0100 (CET) Message-ID: <41E04D6B.3020801@mr0vka.eu.org> Date: Sat, 08 Jan 2005 22:15:23 +0100 From: =?ISO-8859-2?Q?=A3ukasz_Bromirski?= User-Agent: Mozilla Thunderbird 1.0 (Windows/20041205) X-Accept-Language: en-us, en MIME-Version: 1.0 To: freebsd-ipfw@freebsd.org Content-Type: text/plain; charset=ISO-8859-2; format=flowed Content-Transfer-Encoding: 8bit X-Scan-Module: SMTP[mks_vir 2005.01.07 (2004.10.07)] Subject: ipfw/verrevpath and source MAC logging - reloaded X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 08 Jan 2005 21:15:26 -0000 Hi, I've asked few days ago (two weeks actually), about implementing something like `log-input' keyword just like on Cisco IOS routers, when the ACE with this argument is hit it logs also the source MAC address, which is very valuable on multiaccess networks, like Ethernet. As nobody responded, I've digged the sources for a moment, and with my limited knowledge about mbuf's I'm stuck at the following comment: ip_fw2.c: * args->eh The MAC header. It is non-null for a layer2 * packet, it is NULL for a layer-3 packet. ...so, is there some good soul on the list that will point me where to look for MAC source address when we're dealing with `layer 3 packet' in ipfw nomenclature? -- this space was intentionally left blank | Łukasz Bromirski you can insert your favourite quote here | lukasz:bromirski,net