On Mon, Apr 01, 2002 at 07:45:23PM +0100, the grugq wrote:
> I need to sniff on the loopback interface on a Solaris 8 box (and also 7 
> and 2.6).

Then you may not be able to get what you need.\

> From what I have read so far there seems to be a problem in 
> that /dev/lo0 doesn't exist, and therefore can't be opened. Is this the 
> case,

That is the case.

> or am I wrong?  If this is the case, has anyone done any work on 
> developing an lkm to provide /dev/lo0,

I don't know of any.  I don't know whether it's even possible to have a
module do so, unless you can somehow *replace* the loopback driver code.
I don't know what would be required to do that.

> or possibly a patch to pcap that 
> enables sniffing of the loopback device?

I don't believe it is possible to change libpcap in such a way as to
make it possible to sniff the loopback device; I don't think the
loopback driver in Solaris supports it.
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe

Reply via email to