Re: [tcpdump-workers] Capturing external packets sent to loopback (FreeBSD) ?

2020-02-24 Thread Guy Harris via tcpdump-workers
--- Begin Message --- On Feb 24, 2020, at 9:44 AM, Ray Bellis via tcpdump-workers wrote: > I never considered "any" ! But you appear to be suggesting it's not > available in FreeBSD ? It's not. In Linux, packet capture is done with sockets created with a protocol family of PF_PACKET. Those

Re: [tcpdump-workers] Capturing external packets sent to loopback (FreeBSD) ?

2020-02-24 Thread Guy Harris via tcpdump-workers
--- Begin Message --- On Feb 24, 2020, at 6:15 AM, Ray Bellis via tcpdump-workers wrote: > I've got a daemon that listens on a virtual IP address, that is itself > attached to a cloned loopback interface on FreeBSD. What do you mean by "loopback" here? The term "loopback interface" generally

Re: [tcpdump-workers] Capturing external packets sent to loopback (FreeBSD) ?

2020-02-24 Thread Ray Bellis via tcpdump-workers
--- Begin Message --- On 24/02/2020 17:42, Guy Harris wrote: > What do you mean by "loopback" here? The term "loopback interface" > generally means "fake interface that sends packets from the machine > to itself" on UN*Xes, e.g. the lo0 interface on most UN*Xes or just > lo on Linux. Is that the

Re: [tcpdump-workers] Capturing external packets sent to loopback (FreeBSD) ?

2020-02-24 Thread Ray Bellis via tcpdump-workers
--- Begin Message --- On 24/02/2020 17:19, Michael Richardson wrote: > > Ray Bellis via tcpdump-workers wrote: > > I've got a daemon that listens on a virtual IP address, that is itself > > attached to a cloned loopback interface on FreeBSD. > > What do you mean by cloned? > ifconfi

[tcpdump-workers] Capturing external packets sent to loopback (FreeBSD) ?

2020-02-24 Thread Ray Bellis via tcpdump-workers
--- Begin Message --- I've got a daemon that listens on a virtual IP address, that is itself attached to a cloned loopback interface on FreeBSD. Packets for that daemon could be arriving from multiple physical interfaces, and that's what's taxing me just now. I would -really- like to be able to p