Re: User-space bridge on Solaris?

[Guy Harris <guy () alum mit edu>]

On Sep 19, 2008, at 8:16 PM, Ben Greear wrote:

> I noticed that pcap_setdirection doesn't appear to work on Solaris.
>
> Anyone know if it would be possible to get this functionality  
> implemented?

Libpcap runs atop DLPI in Solaris.  In my experience with at least one  
version of Solaris, if you don't enable promiscuous mode, only packets  
received by the host, not packets sent by the host, are delivered.   
The downside is that, if you just want to capture traffic to and from  
your machine, you can't do that by just turning promiscuous mode off  
(and, at least on older versions of Solaris, you have to be root to  
turn promiscuous mode on, even if you have permission to open the DLPI  
device).  The upside is that, if your application doesn't need  
promiscuous mode, and your application doesn't want to see outgoing  
packets, you get that for free by not requesting promiscuous mode.
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.