From owner-freebsd-stable Thu Oct 25 6:47:14 2001 Delivered-To: freebsd-stable@freebsd.org Received: from mail.emaxx.nl (mail.emaxx.nl [217.119.230.65]) by hub.freebsd.org (Postfix) with ESMTP id 8E69C37B401; Thu, 25 Oct 2001 06:47:09 -0700 (PDT) Received: from cs7p12.dial.cistron.nl ([62.216.0.141] helo=emaxx.nl) by mail.emaxx.nl with esmtp (Exim 3.22 #1) id 15wkqW-0009jh-00; Thu, 25 Oct 2001 15:46:57 +0200 Message-ID: <3BD81802.2010209@emaxx.nl> Date: Thu, 25 Oct 2001 15:47:46 +0200 From: Pascal Hofstee User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:0.9.5+) Gecko/20011016 X-Accept-Language: en-us MIME-Version: 1.0 To: sudz@ns3g.com Cc: freebsd-stable@FreeBSD.ORG, freebsd-questions@FreeBSD.ORG Subject: Re: Openssh References: Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Colin Legendre wrote: > I have now noticed that this only occurs if you run trafshow/or/tcpdump on > the machine you are connected to, if you run trafshow on the server end the > connection it goes crazy, if you run it only on the client end it is fine. > Looks like there is a problem in the interaction between the ssh2 protocol > in Openssh and the bpf0 device. Any ideas? So just to get this straight ....when running tcpdump/trafshow on the "LOCAL" machine there is no real network traffic between the two systems. When doing the same thing on the "REMOTE" machine the network traffic goes to about 40-50k p/s. Well trafshow/tcpdump show network traffic statistics. Running them on the "remote" host will have to show the output on the "local" host .. transporting the data over the network ... which in turn will generate new trafshow/tcpdump input data .. which will generate output that in turn needs to be send to your "local" system ... which generates new input etc ..... You're basically monitoring your own SSH traffic that gets generated by using network traffic analysys tools on the REMOTE end of the connection. -- Pascal Hofstee To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message