bpf seeing non-local traffic on lo0

[Vlad GALU]

On 7/5/06, Vlad GALU <vladgalu at gmail.com> wrote:
>      I was debugging a dspam->clamav connection and I saw two packets
> which didn't belong to the loopback interface. The destination IP was
> assigned to one of the physical interfaces, and the source IP was
> somewhere on the internet. I've no idea how to reproduce it.

   It looks like a BPF miscompilation, since the filter I set said
"tcp port 3310" and the captured packets have, indeed, a source port
of 3310. It's perhaps worth saying that the machine is an EM64T
running amd64.


>
> --
> If it's there, and you can see it, it's real.
> If it's not there, and you can see it, it's virtual.
> If it's there, and you can't see it, it's transparent.
> If it's not there, and you can't see it, you erased it.
>


-- 
If it's there, and you can see it, it's real.
If it's not there, and you can see it, it's virtual.
If it's there, and you can't see it, it's transparent.
If it's not there, and you can't see it, you erased it.