From owner-freebsd-net@FreeBSD.ORG  Tue Aug  5 07:31:03 2003
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id A007637B401; Tue,  5 Aug 2003 07:31:03 -0700 (PDT)
Received: from pit.databus.com (p70-227.acedsl.com [66.114.70.227])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id D5EDA43F93; Tue,  5 Aug 2003 07:31:02 -0700 (PDT)
	(envelope-from barney@pit.databus.com)
Received: from pit.databus.com (localhost [127.0.0.1])
	by pit.databus.com (8.12.9/8.12.9) with ESMTP id h75EV12A052192;
	Tue, 5 Aug 2003 10:31:01 -0400 (EDT)
	(envelope-from barney@pit.databus.com)
Received: (from barney@localhost)
	by pit.databus.com (8.12.9/8.12.9/Submit) id h75EV1nx052191;
	Tue, 5 Aug 2003 10:31:01 -0400 (EDT)
	(envelope-from barney)
Date: Tue, 5 Aug 2003 10:31:01 -0400
From: Barney Wolff <barney@databus.com>
To: Edwin Groothuis <edwin@freebsd.org>
Message-ID: <20030805143100.GA52099@pit.databus.com>
References: <20030805133922.GA7713@k7.mavetju>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20030805133922.GA7713@k7.mavetju>
User-Agent: Mutt/1.4.1i
X-Scanned-By: MIMEDefang 2.35
cc: freebsd-net@freebsd.org
Subject: Re: bpf, ipfw and before-and-after
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 05 Aug 2003 14:31:03 -0000

On Tue, Aug 05, 2003 at 11:39:23PM +1000, Edwin Groothuis wrote:
> 
> Now my question to you guys is, does what I want or what I describe
> here make a little bit sense? Or am I totally going the wrong way?
> Or has this topic already been discussed multiple times and decided
> not to do it? Maybe there is somebody thinks this is a cool thing
> and wants to help me with adding it to the system?

Seems to me that with ipfw logging and tcpdump packet selection this
is largely a non-issue.  We should be wary of adding complexity to
what's already at the limits of human comprehension.

Now if somebody wanted to add the ability to dump the complete packet
to ipfw ...  :)

-- 
Barney Wolff         http://www.databus.com/bwresume.pdf
I'm available by contract or FT, in the NYC metro area or via the 'Net.