Snooping on a VNIC with ipv6 unplumbed , one will not see any ipv6 NS/NA
packets while ipv6 is being plumbed up on another VNIC with the same physical
NIC . You can snoop this traffic after the VNIC has been plumbed up. This is
because ipv6 NS/NA are multicast . Even with ipv6 plumbed up , there are still
some traffic hidden from snoop , like dhcpv6 solicit message, which are
usually sent to multicast address ff02::1:2 .
If one is using raw endpoint( datalink layer) on a VNIC , similar problem
will happen. On a physical NIC , all multicast are received . On a VNIC , the
multicast packets are discarded.
Shouldn't all multicast packets be delivered to the VNIC while the VNIC is
in promiscous mode , or a raw endpoint has been opened on the VNIC?
This message posted from opensolaris.org
