Index | Thread | Search

From:
Chris Cappuccio <chris@nmedia.net>
Subject:
Re: bpf filtering on arbitrary sockets
To:
Damien Miller <djm@mindrot.org>, tech@openbsd.org
Date:
Thu, 30 Oct 2025 13:31:14 -0700

Download raw body.

Thread
Theo de Raadt [deraadt@openbsd.org] wrote:
> 
> in frame manual page:
> 
> DESCRIPTION
>      The frame protocol family provides an interface for sending and receiving
>      low level network interface frames through the normal socket(2)
>      mechanisms.
> 
> I dislike how the manual page dances around trying to avoid using the word "ethernet".
> 
> Sure it is trying to be general, but what does that mean??
> 
>     Currently only Ethernet interfaces are supported.
> 
> What is there, other than ethernet?? 

libpcap supports monitor mode on 802.11 under AF_PACKET for instance, used for
anything related to network fuckery, also hostapd/wpa_supplicant

maybe even tunnels and PPP could expose this type of interface