daily CVS update output

2016-08-15 Thread NetBSD source update
Updating src tree: P src/distrib/sets/Makefile P src/distrib/sets/mkvars.mk P src/distrib/sets/sets.subr P src/distrib/sets/lists/xbase/shl.mi P src/distrib/sets/lists/xcomp/mi P src/distrib/sets/lists/xcomp/shl.mi P src/distrib/sets/lists/xdebug/mi P src/distrib/sets/lists/xdebug/shl.mi P

Re: Building on OS X - how?

2016-08-15 Thread Hubert Feyrer
Hi Jaromir, > Am 13.08.2016 um 22:06 schrieb Jaromír Doleček : > FWIW, build of tools for both i386 and sparc64 finished without > problems for me on Mac OS X host (10.11.6), building from clean > sources. Do you have the Mac OS X Command Line Tools installed? It’s not

Re: Why so many packet filters?

2016-08-15 Thread Ryota Ozaki
On Mon, Aug 15, 2016 at 4:13 PM, Joerg Sonnenberger wrote: > On Mon, Aug 15, 2016 at 01:51:38PM +0900, Ryota Ozaki wrote: >> BTW should we mark pf and ipf deprecated in netbsd-8 as they aren't >> well maintained nowadays? > > While they are not maintained, PF works quite well for

NPF table bug (Was: Why so many packet filters?)

2016-08-15 Thread Geoff Wing
On Monday 2016-08-15 17:14 +1000, Joerg Sonnenberger output: :[] There are still quite a few issues with NPF, primarily :documentation issues, but also some functional ones. It seems a bit [...] I recently ran into an NPF bug (PR 50511 from December last year). A cursory scan suggested it was

Re: Why so many packet filters?

2016-08-15 Thread Malcolm Herbert
On Mon, Aug 15, 2016 at 09:13:46AM +0200, Joerg Sonnenberger wrote: |On Mon, Aug 15, 2016 at 01:51:38PM +0900, Ryota Ozaki wrote: |> BTW should we mark pf and ipf deprecated in netbsd-8 as they aren't |> well maintained nowadays? | |While they are not maintained, PF works quite well for the

Re: Why so many packet filters?

2016-08-15 Thread Joerg Sonnenberger
On Mon, Aug 15, 2016 at 01:51:38PM +0900, Ryota Ozaki wrote: > BTW should we mark pf and ipf deprecated in netbsd-8 as they aren't > well maintained nowadays? While they are not maintained, PF works quite well for the feature set our version has. There are still quite a few issues with NPF,

Re: Why so many packet filters?

2016-08-15 Thread Paul Goyette
On Mon, 15 Aug 2016, Ryota Ozaki wrote: First of all, bpf (bpfjit) is different from the others. bpf sniffs raw packets on rx/tx in network device drivers (grep bpf_mtap) and also allows to send raw packets directly via ifp->if_output (e.g., ether_output). It doesn't provide pass/block filters