nexmon – Blame information for rev 1
?pathlinks?
Rev | Author | Line No. | Line |
---|---|---|---|
1 | office | 1 | The following instructions are applicable to Tru64 UNIX |
2 | (formerly Digital UNIX (formerly DEC OSF/1)) version 4.0, and |
||
3 | probably to later versions as well; at least some options apply to |
||
4 | Digital UNIX 3.2 - perhaps all do. |
||
5 | |||
6 | In order to use kernel packet filtering on this system, you have |
||
7 | to configure it in such a way : |
||
8 | |||
9 | Kernel configuration |
||
10 | -------------------- |
||
11 | |||
12 | The packet filtering kernel option must be enabled at kernel |
||
13 | installation. If it was not the case, you can rebuild the kernel with |
||
14 | "doconfig -c" after adding the following line in the kernel |
||
15 | configuration file (/sys/conf/<HOSTNAME>): |
||
16 | |||
17 | option PACKETFILTER |
||
18 | |||
19 | or use "doconfig" without any arguments to add the packet filter driver |
||
20 | option via the kernel option menu (see the system administration |
||
21 | documentation for information on how to do this). |
||
22 | |||
23 | Device configuration |
||
24 | -------------------- |
||
25 | |||
26 | Devices used for packet filtering must be created thanks to |
||
27 | the following command (executed in the /dev directory): |
||
28 | |||
29 | ./MAKEDEV pfilt |
||
30 | |||
31 | Interface configuration |
||
32 | ----------------------- |
||
33 | |||
34 | In order to capture all packets on a network, you may want to allow |
||
35 | applications to put the interface on that network into "local copy" |
||
36 | mode, so that Wireshark can see packets sent by the host on which it's |
||
37 | running as well as packets received by that host, and to put the |
||
38 | interface into "promiscuous" mode, so that Wireshark can see packets on |
||
39 | the network segment not sent to the host on which it's running, by using |
||
40 | the pfconfig(1) command: |
||
41 | |||
42 | pfconfig +c +p <network_device> |
||
43 | |||
44 | or allow application to put any interface into "local copy" or |
||
45 | "promiscuous" mode by using the command: |
||
46 | |||
47 | pfconfig +c +p -a |
||
48 | |||
49 | Note: all instructions given require root privileges. |