Re: any interest in tripwire commercial?

2010-12-11 Thread Michael Scheidell
Probably. does everyone put 32 bit compatibility libraries in their amd64 builds? __ Never, unless running cosed source software. It seems to triple your attack surface area. than the answer is no' you would not want an i386 version since you need to put 32bit compatibility in if

packet capture and if_bridge ignore bpf rules

2010-12-11 Thread Michael Scheidell
I am just not working on tracking this down, and sometimes like to use tcpdump/tshark to watch specific packets on a host to look for 'interesting' things. I think I have seen this since 6.x I don't remember it on 5.x, but 5.x used 'bridge' and 6.x and 7.x are using if_bridge. system is 7.3,