Subject: Re: 802.11 libpcap support
To: None <tech-net@netbsd.org, tcpdump-workers@tcpdump.org>
From: Michael Richardson <mcr@sandelman.ottawa.on.ca>
List: tech-net
Date: 05/22/2002 15:30:11
>>>>> "Bill" == Bill Studenmund <wrstuden@netbsd.org> writes:
Bill> So my suggestion is for 802.11 interfaces (and any others that have
Bill> multiple frame types) to not send any packets to bpf by default. Instead,
Bill> it sends bpf packet types that bpf has asked for. Each driver keeps a mask
Bill> of types it supports (and identifiers for said bits, like bit 1 is 802.11,
Bill> bit 2 is 802.3, ...), and hands bpf packets bpf has a listener for.
This sounds reasonable.
Note, from what I understand, the same problem occurs for a number of other
interface types:
1) GigE, which has to do 802.3 and not EthernetII if you want jumbo frames.
2) CiscoHDLC type stuff.
3) Ethernet over ATM types.
4) any of the above with VLANs.
] ON HUMILITY: to err is human. To moo, bovine. | firewalls [
] Michael Richardson, Sandelman Software Works, Ottawa, ON |net architect[
] mcr@sandelman.ottawa.on.ca http://www.sandelman.ottawa.on.ca/ |device driver[
] panic("Just another NetBSD/notebook using, kernel hacking, security guy"); [