In message <[EMAIL PROTECTED]>, John-Mark Gurney writes:

>I have patches that teach tcpdump how to understand divert sockets...
>(I forget if I write the packets back to continue the chain or if you
>have to use tee..)  This has the advantage of preventing yet another
>device in the system.. though it does prevent normal users from being
>able to watch the traffic...
>
>Anyone interested?

I guess you can do the same thing with "ipfwpcap | tcpdump -r -" so
I wonder if it isn't wiser to leave tcpdumps sources alone, in particular
given that it is 3rd party software ?

-- 
Poul-Henning Kamp       | UNIX since Zilog Zeus 3.20
[EMAIL PROTECTED]         | TCP/IP since RFC 956
FreeBSD committer       | BSD since 4.3-tahoe    
Never attribute to malice what can adequately be explained by incompetence.
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/cvs-all
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to