ngrep/ixgbe bpf bug

[Alexander V. Chernikov]

Do you have vlans on top of ixgbe?
And actually I wonder what does tcpdump show for the same expression.
( and tcpdump -i ixX -lnes0 might provide good traces on what is going on)

30.11.2015, 19:09, "elof2 at sentor.se" <elof2 at sentor.se>:
> No one has a theory?
>
> /Elof
>
> On Thu, 5 Nov 2015, elof2 at sentor.se wrote:
>
>>  Hi all!
>>
>>  Why don't ngrep work on ix interfaces?
>>
>>  It shows nice values if I sniff on other interfaces, e.g. igb0 and
>>  bridge0:
>>
>>  # ngrep -d igb0 "q" ip
>>  I see some matching packets. Everything looks good.
>>
>>  # netstat -B
>>   Pid Netif Flags Recv Drop Match Sblen Hblen Command
>>  1800 igb0 p--s--- 135 0 129 380 0 ngrep
>>  The BPF stats show Recv and Match values. Good.
>>
>>  # ngrep -d bridge0 "q" ip
>>   I see some matching packets. Good.
>>
>>  # netstat -B
>>   Pid Netif Flags Recv Drop Match Sblen Hblen Command
>>  1901 bridge0 p--s--- 661897 0 659170 425606 0 ngrep
>>  Again, the BPF stats show Recv and Match values. Good.
>>
>>  However, if I sniff on an ix interface:
>>
>>  # ngrep -d ix1 "q" ip
>>  I get no matching packets!
>>
>>  # netstat -B
>>   Pid Netif Flags Recv Drop Match Sblen Hblen Command
>>  1816 ix1 p--s--- 45340 0 0 0 0 ngrep
>>                                                 ^^^
>>  ...and the BPF stats always show zero Matches.
>>
>>  Bug in the ixgbe driver or in ngrep?
>>
>>  /Elof
>>
>>  _______________________________________________
>>  freebsd-net at freebsd.org mailing list
>>  https://lists.freebsd.org/mailman/listinfo/freebsd-net
>>  To unsubscribe, send any mail to "freebsd-net-unsubscribe at freebsd.org"
>
> _______________________________________________
> freebsd-net at freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-net
> To unsubscribe, send any mail to "freebsd-net-unsubscribe at freebsd.org"