> Hi Meem, > > >If promiscuous-mode is not enabled, only packets associated with the > >addresses hosted on a particular interface will be visible. > > We were talking about -P mode on IRC yesterday and we came to the > conclusion that the behaviour of -P for ipnet devices will match what > the snoop manpage says for -P. The IPobs design doc needs modifying to > match this. Do you see this being a problem here? I don't see a problem.
No; I'll revise the wording in the design document to state: If promiscuous-mode is not enabled, only IP packets destined to addresses hosted on a particular interface (or multicast/broadcast packets) will be visible. > >3. Invoke ipnet_hook() only once, but have it record both the passed-in > >interface's index *and* the IPMP group interface's index in the > >ipnet_hook_data_t (by adding a new ihd_grifindex field). Last, update > >ipnet_accept() to check both indices for a match. This seems like it > >would match the proposed behavior, at the expense of having an > >additional IPMP-specific field in the ipnet_hook_data_t. > > Assuming that works it seems like the best solution, I don't think > having an IPMP-specific field hurts. OK, I'll code it up and see how it works. -- meem
