Re: Reading raw ethernet

From: Julian Elischer (julian_at_elischer.org)
Date: 08/19/05

  • Next message: Paul Khavkine: "Re: Reading raw ethernet" 
    Date: Fri, 19 Aug 2005 13:50:50 -0700
To: Paul Khavkine <paul@distributel.net>

    Paul Khavkine wrote:
    > Hi guys.
    >
    >
    > I'm writing a small program to read raw ethernet frames out of netgraph
    > to capture Spannign Tree packets from the switch.
    >
    > Is it possible to pick up STP frames without putting the interface in
    > promiscuous mode ?

    If you don't put it in promiscuous mode, then you will only see broadcast
    packets and packets aimed at you specifically.

    If that's enough then there is nothing in netgraph that insists that
    you turn on promiscuous mode.

    You should probably look at the ng_etf node too BTW.

    >
    > Thanx
    > Paul
    >
    > ************************************************
    > Paul Khavkine
    > Networks/Systems Planning and Engineering
    > DISTRIBUTEL Communications.
    > 740 Notre Dame West, Suite 1135
    > Montreal, Quebec, Canada, H3C 3X6
    > +1-514-877-5505 x 263
    > http://www.distributel.net
    > ************************************************
    >
    > _______________________________________________
    > freebsd-net@freebsd.org mailing list
    > http://lists.freebsd.org/mailman/listinfo/freebsd-net
    > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"

    _______________________________________________
    freebsd-net@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-net
    To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"

  • Next message: Paul Khavkine: "Re: Reading raw ethernet"

    Relevant Pages

    • Re: Reading raw ethernet
      ... >> I'm writing a small program to read raw ethernet frames out of netgraph ... >> to capture Spannign Tree packets from the switch. ... >If you don't put it in promiscuous mode, then you will only see broadcast ...
      (freebsd-net)
    • netgraph memory trouble
      ... I have been playing with the netgraph ng_split node. ... that if I sent packets to it, after a period of time, I could no ... Since this macro nulls out the item pointer, ... output hook is null\n"); ...
      (freebsd-net)
    • Re: [TEST/REVIEW #2] ng_ipfw: node to glue together ipfw(4) and netgraph(4)
      ... > pls review an updated patch bringing in ng_ipfw node. ... > - packets coming from netgraph are queued, ... when looking at the error of an application having packets sunk there. ... >> helps them later to reenter ipfw processing. ...
      (freebsd-net)
    • [TEST/REVIEW] ng_ipfw: node to glue together ipfw(4) and netgraph(4)
      ... can be sent to netgraph(4) using ipfw 'netgraph' action, ... Matched packets are sent out from corresponding ... helps them later to reenter ipfw processing. ... any node hook reenter IP stack. ...
      (freebsd-current)
    • [TEST/REVIEW] ng_ipfw: node to glue together ipfw(4) and netgraph(4)
      ... can be sent to netgraph(4) using ipfw 'netgraph' action, ... Matched packets are sent out from corresponding ... helps them later to reenter ipfw processing. ... any node hook reenter IP stack. ...
      (freebsd-net)