Re: localhost on Solaris

[Darren Reed <darrenr () reed wattle id au>]

> Hi !
>
> I understand there is no solution to sniffing
> for local traffic on Solaris since the
> kernel always used the loopback interface for
> that.
>
> I suggest to write a STREAMS module to sit on top
> of the loopback driver.
>
> Does anyone know if the loopback driver is a 
> STREAMS driver ? (Say, Solaris 8 and on?)
>
> Any comments or advice on this ?

There is no loopback driver:

$ modinfo | grep -i loop | wc
       0       0       0
$ echo /dev/lo*
/dev/lockstat /dev/log /dev/logindmux

That is the root of the problem.  The loopback interface
and loopback traffic handling in Solaris, is hard coded
inside of IP.

Darren
-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.