From owner-freebsd-isdn Fri Aug 21 10:02:52 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id KAA03147 for freebsd-isdn-outgoing; Fri, 21 Aug 1998 10:02:52 -0700 (PDT) (envelope-from owner-freebsd-isdn@FreeBSD.ORG) Received: from mail.ppp.net (mail.ppp.net [194.64.12.35]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id KAA03138 for ; Fri, 21 Aug 1998 10:02:48 -0700 (PDT) (envelope-from ernie!bert.kts.org!hm@ppp.net) Received: from casparc.ppp.net (casparc2.ppp.net [194.64.12.42]) by mail.ppp.net (8.8.8/8.8.8) with SMTP id TAA22023; Fri, 21 Aug 1998 19:02:03 +0200 Received: from ernie by casparc.ppp.net with uucp (Smail3.1.28.1 #1) id m0z9uZe-002ZjfC; Fri, 21 Aug 98 19:02 MET DST Received: from bert.kts.org(really [194.55.156.2]) by ernie.kts.org via sendmail with smtp id for ; Fri, 21 Aug 1998 18:34:37 +0200 (CEST) (Smail-3.2.0.91 1997-Jan-14 #3 built 1998-Feb-14) Received: by bert.kts.org via sendmail with stdio id for freebsd-isdn@FreeBSD.ORG; Fri, 21 Aug 1998 18:34:37 +0200 (CEST) (Smail-3.2.0.94 1997-Apr-22 #1 built 1998-Jun-6) Message-Id: From: hm@kts.org (Hellmuth Michaelis) Subject: Re: tcpdump and isppp0 In-Reply-To: from Anderl at "Aug 20, 98 10:08:12 am" To: andreas.gaertner.gp@oen.siemens.de (Anderl) Date: Fri, 21 Aug 1998 18:34:37 +0200 (CEST) Cc: freebsd-isdn@FreeBSD.ORG Organization: Kitchen Table Systems Reply-To: hm@kts.org X-Mailer: ELM [version 2.4ME+ PL38 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isdn@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Anderl wrote: > now i wanted to check the traffic going over the interface using 'tcpdump > -i isppp0'. everything seemed fine. i started up the connection, put > tcpdump onto the interface to listen and did a ping to a remote site. i > stopped the ping and since then weird packets were wandering from the > remote site to my machine and vice versa and wouldn't stop. also inetd > showed traffic. when i then terminated tcpdump all grew quiet again. > connection was still up and no traffic went over the interface. so > something (i assume tcpdump) must effect or even generate traffic over > isppp0 even if there is none or supposed to be none. how can that be? BPF support for the isppp driver is buggy or at least inconsistent (two call to bpf_mtap() with different parameter passing). Also there seemed to be a parameter passing change happened for bpf_mtap() for FreeBSD-current. Since i still don't use sppp and i don't run current, diffs are - as usual - welcome ;-) hellmuth -- Hellmuth Michaelis hm@kts.org Hamburg, Europe A duck is like a bicycle because they both have two wheels except the duck (terry@cs.weber.edu) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isdn" in the body of the message