[strongSwan-dev] Proxy ARP plugin farp or FreeBSD

Martin Willi martin at strongswan.org
Mon Oct 6 14:21:18 CEST 2014


> I cannot attach a BPF to an arbitrary socket. On FreeBSD a BPF device
> must be opened, and a network interface on which to filter must be
> associated with that bpf device.

If attaching that filter does not work, you may alternatively omit the
filter, and then just filter matching ARP packets in userspace. If you
can limit AF_PACKET sockets to just ARP packets (as it is currently
done), the overhead of userspace filtering shouldn't be that bad.

Regards
Martin



More information about the Dev mailing list