Date: Thu, 25 Oct 2001 15:47:46 +0200 From: Pascal Hofstee <pascal@emaxx.nl> To: sudz@ns3g.com Cc: freebsd-stable@FreeBSD.ORG, freebsd-questions@FreeBSD.ORG Subject: Re: Openssh Message-ID: <3BD81802.2010209@emaxx.nl> References: <EGEAJNBPMIDPDNBOENHFOEIECLAA.sudz@ns3g.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Colin Legendre wrote: > I have now noticed that this only occurs if you run trafshow/or/tcpdump on > the machine you are connected to, if you run trafshow on the server end the > connection it goes crazy, if you run it only on the client end it is fine. > Looks like there is a problem in the interaction between the ssh2 protocol > in Openssh and the bpf0 device. Any ideas? So just to get this straight ....when running tcpdump/trafshow on the "LOCAL" machine there is no real network traffic between the two systems. When doing the same thing on the "REMOTE" machine the network traffic goes to about 40-50k p/s. Well trafshow/tcpdump show network traffic statistics. Running them on the "remote" host will have to show the output on the "local" host .. transporting the data over the network ... which in turn will generate new trafshow/tcpdump input data .. which will generate output that in turn needs to be send to your "local" system ... which generates new input etc ..... You're basically monitoring your own SSH traffic that gets generated by using network traffic analysys tools on the REMOTE end of the connection. -- Pascal Hofstee To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3BD81802.2010209>