On 14 Nov 2005, at 20:26, Theo de Raadt wrote:
you probably want to use 'bridge'
thanks for the pointer, however I am not sure bridge is what I am
after, let me try and explain what I meant slightly more clearly (if
anyone is interested).....
My openbsd box has three interfaces, em2 will be used for remote access.
em0 and em1 will be used for traffic passively collected from the
network using an ethernet tap.
so for example em0 will see all the receive traffic and em1 will see
all the transmit traffic.
so in order to do some traffic analysis I guess it is desirable for
these two interfaces (em0,em1) to be represented by one 'virtual'
interface aliased to em0 and em1, so the full-duplex traffic is seen
by tools like tcpdump/argus etc.
any thoughts? and what is a round-robin trunk?!?!?
thanks for your time
poncenby
