Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 8 Nov 2000 02:00:40 -0800
From:      Dragos Ruiu <dr@kyx.net>
To:        Kris Kennaway <kris@FreeBSD.ORG>, Konrad Heuer <kheuer@gwdu60.gwdg.de>
Cc:        freebsd-hackers@FreeBSD.ORG, freebsd-security@FreeBSD.ORG
Subject:   Re: TCPDUMP patch v1.1 and AppleTalk
Message-ID:  <0011080203080F.00551@smp.kyx.net>
In-Reply-To: <20001107223959.B41350@citusc17.usc.edu>
References:  <Pine.BSF.4.21.0011071347410.1003-100000@gwdu60.gwdg.de> <20001107223959.B41350@citusc17.usc.edu>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 07 Nov 2000, Kris Kennaway wrote:
> 
> On Tue, Nov 07, 2000 at 01:56:21PM +0100, Konrad Heuer wrote:
> 
> > After patching and installing, tcpdump can't be used anymore since it puts
> > very heavy load onto the network via xl0 and AppleTalk broadcast messages
> > (one message each 0.2 ms). Sorry, in the moment I don't know more details
> > ...
> 
> tcpdump shouldn't be sending any appletalk packets, I thought (I may
> be wrong, never used it on an appletalk network). Are you sure this is
> the problem?

I've never run this kind of a scenario here so I'm speaking from
a vacuum of knowledge and pure conjecture... ;-) but could it be generating
packets through name resolutions.... ??? 
Does it still generate the packets with -n ?

cheers,
--dr


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?0011080203080F.00551>