ipfw tee fixed [cvs commit: src/sbin/ipfw ipfw.8 src/sys/netinet ip_fw_pfil.c]

Ruslan Ermilov ru at FreeBSD.org
Mon Sep 13 11:54:55 PDT 2004


On Mon, Sep 13, 2004 at 08:44:12PM +0200, Andre Oppermann wrote:
> Ruslan Ermilov wrote:
> >On Mon, Sep 13, 2004 at 06:51:56PM +0200, Andre Oppermann wrote:
> >
> >>I've fixed 'ipfw tee' in 6-current.  Please try it and report back.  This
> >>is pretty useful for passive packet monitoring.
> >>
> >
> >Just to make it crystal clear for everyone, the tee'd fragments are
> >still reassembled into a full packet before the diversion, correct?
> 
> No, they are not.  Only diverted packets are reassembled, tee'd packet
> are not.
> 
Then at least the divert(4) manpage should be updated to document the
difference in behavior (between "divert" and "tee").


Cheers,
-- 
Ruslan Ermilov
ru at FreeBSD.org
FreeBSD committer
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-current/attachments/20040913/e70b9814/attachment.bin


More information about the freebsd-current mailing list