Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 5 Jul 2006 20:13:39 +0300
From:      "Vlad GALU" <vladgalu@gmail.com>
To:        freebsd-net@freebsd.org
Subject:   Re: bpf seeing non-local traffic on lo0
Message-ID:  <79722fad0607051013w38f03fcrd0f9b439dcca2de0@mail.gmail.com>
In-Reply-To: <79722fad0607051009r4cd6a23bh8923b4aa844c6e40@mail.gmail.com>
References:  <79722fad0607051009r4cd6a23bh8923b4aa844c6e40@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On 7/5/06, Vlad GALU <vladgalu@gmail.com> wrote:
>      I was debugging a dspam->clamav connection and I saw two packets
> which didn't belong to the loopback interface. The destination IP was
> assigned to one of the physical interfaces, and the source IP was
> somewhere on the internet. I've no idea how to reproduce it.

   It looks like a BPF miscompilation, since the filter I set said
"tcp port 3310" and the captured packets have, indeed, a source port
of 3310. It's perhaps worth saying that the machine is an EM64T
running amd64.


>
> --
> If it's there, and you can see it, it's real.
> If it's not there, and you can see it, it's virtual.
> If it's there, and you can't see it, it's transparent.
> If it's not there, and you can't see it, you erased it.
>


-- 
If it's there, and you can see it, it's real.
If it's not there, and you can see it, it's virtual.
If it's there, and you can't see it, it's transparent.
If it's not there, and you can't see it, you erased it.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?79722fad0607051013w38f03fcrd0f9b439dcca2de0>