> On 14 Nov 2005, at 20:26, Theo de Raadt wrote: > > > > you probably want to use 'bridge' > > > > thanks for the pointer, however I am not sure bridge is what I am > after, let me try and explain what I meant slightly more clearly (if > anyone is interested)..... > > My openbsd box has three interfaces, em2 will be used for remote access. > em0 and em1 will be used for traffic passively collected from the > network using an ethernet tap. > so for example em0 will see all the receive traffic and em1 will see > all the transmit traffic. > > so in order to do some traffic analysis I guess it is desirable for > these two interfaces (em0,em1) to be represented by one 'virtual' > interface aliased to em0 and em1, so the full-duplex traffic is seen > by tools like tcpdump/argus etc. > > any thoughts? and what is a round-robin trunk?!?!?
It means that if you create a trunk interface with em0 and em1 as trunkports, packets will be distributed between the two adapters, one time on em0, another one on em1 (round-robin algorithm). See trunk(4) for details. > thanks for your time > > poncenby
