tcpdump mailing list archives

Re: solaris loopback


From: Guy Harris <guy () netapp com>
Date: Fri, 14 Feb 2003 11:19:31 -0800

On Fri, Feb 14, 2003 at 01:09:57PM -0500, Andrew Brown wrote:
i might buy that, except that /dev/hme and /dev/le (and presumably the
other network device sounding names) all work for snarfing traffic.

Eh?

What does whether they work for snarfing traffic have to do with whether
they're clone devices?

Clone devices are a general mechanism used for things that aren't
network devices or protocols, such as the pseudo-tty master device:

      crw-rw-rw-   1 root      11,  23 Mar  1  2000 ptmx

some of them have other purposes that i know of (eg, /dev/ip or
/dev/tcp) such as using them for controlling ndd (network device
diddler?) settings.  i think that major number 11 on solaris is just a
dumping ground for pseudo devices that do "stuff".

Yes.  The "stuff" is called cloning.
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe


Current thread: