[Bug 239371] epair(4) doesn't expose network traffic to bpf(4), ex. wireshark doesn't see it

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=239371

--- Comment #10 from Kristof Provost <kp at freebsd.org> ---
(In reply to Yuri Victorovich from comment #9)
lo0 is used for loopback traffic, and that includes connections from a public
IP of your machine to a public IP from your machine.

So, if your machine has re0, with 10.0.0.1/24 assigned to it, connecting to
10.0.0.1:1234 will pass over lo0, even though you might expect to see that
traffic on re0. The same thing applies when that connection is made from a
(non-vnet) jail to the host machine. It still applies if you have IP addresses
in different nets. Anything to yourself will pass over lo0.

If you connect to a different (i.e. non-local) IP, you will see the traffic on
re0. That's all expected behaviour.

-- 
You are receiving this mail because:
You are the assignee for the bug.