From: Chris Cappuccio <chris@nmedia.net>
Subject: Re: bpf filtering on arbitrary sockets
To: Damien Miller <djm@mindrot.org>, tech@openbsd.org
Date: Thu, 30 Oct 2025 13:31:14 -0700

Theo de Raadt [deraadt@openbsd.org] wrote:
> 
> in frame manual page:
> 
> DESCRIPTION
>      The frame protocol family provides an interface for sending and receiving
>      low level network interface frames through the normal socket(2)
>      mechanisms.
> 
> I dislike how the manual page dances around trying to avoid using the word "ethernet".
> 
> Sure it is trying to be general, but what does that mean??
> 
>     Currently only Ethernet interfaces are supported.
> 
> What is there, other than ethernet?? 

libpcap supports monitor mode on 802.11 under AF_PACKET for instance, used for
anything related to network fuckery, also hostapd/wpa_supplicant

maybe even tunnels and PPP could expose this type of interface