> Hi !
>
> I understand there is no solution to sniffing
> for local traffic on Solaris since the
> kernel always used the loopback interface for
> that.
>
> I suggest to write a STREAMS module to sit on top
> of the loopback driver.
>
> Does anyone know if the loopback driver is a
> STREAMS driver ? (Say, Solaris 8 and on?)
>
> Any comments or advice on this ?
There is no loopback driver:
$ modinfo | grep -i loop | wc
0 0 0
$ echo /dev/lo*
/dev/lockstat /dev/log /dev/logindmux
That is the root of the problem. The loopback interface
and loopback traffic handling in Solaris, is hard coded
inside of IP.
Darren
-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.
