On Tue, 28 Mar 2000, David Gilbert wrote: > >>>>> "Brian" == Brian Kraemer <[EMAIL PROTECTED]> writes: > > Brian> in message <[EMAIL PROTECTED]>, > Brian> David Gilbert writes: > >> It appears that when I run two (not sure if one does it) tcpdumps > >> on the dhcp server, the dhcp clients don't get any responses to > >> their queries. Is there some flaw in the dhcpd bpf rules? > > Brian> Do you have enough bpf devices enabled? I imagine each tcpdump > Brian> will use one, and dhcpd also uses one if I am not mistaken. > > Well... one not-so-nice "feature" of the dhcpd or bpf interface (don't > know which) is that it requires one bpf per interface. I do believe this was done for security reasons. (ie, if a box with dhcpd is compromised but only has 1 bpf interface, it would require stopping of dhcpd or a recompiled kernel/reboot to run tcpdump, which hopefully would be noticed) Bob <[EMAIL PROTECTED]> "And I had the same fish/pants/jolt/staples/cieling problem you did." - John Teffer To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-stable" in the body of the message
