On Fri, Feb 14, 2003 at 01:09:57PM -0500, Andrew Brown wrote: > i might buy that, except that /dev/hme and /dev/le (and presumably the > other network device sounding names) all work for snarfing traffic.
Eh? What does whether they work for snarfing traffic have to do with whether they're clone devices? Clone devices are a general mechanism used for things that aren't network devices or protocols, such as the pseudo-tty master device: > crw-rw-rw- 1 root 11, 23 Mar 1 2000 ptmx > some of them have other purposes that i know of (eg, /dev/ip or > /dev/tcp) such as using them for controlling ndd (network device > diddler?) settings. i think that major number 11 on solaris is just a > dumping ground for pseudo devices that do "stuff". Yes. The "stuff" is called cloning. - This is the TCPDUMP workers list. It is archived at http://www.tcpdump.org/lists/workers/index.html To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
