Date: Sat, 08 Dec 2007 11:03:54 +0000 From: Peter Wood <peter@alastria.net> To: freebsd-net@FreeBSD.org Subject: Re: Aggregating many ports into one for tcpdump server. (also sampling before libpcap) Message-ID: <475A7A1A.9030002@alastria.net> In-Reply-To: <20071208104110.GB75826@heff.fud.org.nz> References: <4755EFDD.8070609@isc.org> <20071205021851.V87930@fledge.watson.org> <ad79ad6b0712050100p90a1917w5440e06a94f816e7@mail.gmail.com> <20071205093244.U87930@fledge.watson.org> <20071205094657.P87930@fledge.watson.org> <475A735F.8000907@alastria.net> <20071208104110.GB75826@heff.fud.org.nz>
next in thread | previous in thread | raw e-mail | index | archive | help
> Thats why you combine if_bridge with monitor mode, any incoming packets > are discarded after bpf processing so they are never sent to opposing > devices. Aha, using monitor mode hadn't occured to me, based on previous discussion I was going to do more research on Monday, but thanks Andrew you've saved me the effort :). P. -- Peter Wood <peter@alastria.net>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?475A7A1A.9030002>