*BSD News Article 79813


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.carno.net.au!harbinger.cc.monash.edu.au!news.cs.su.oz.au!metro!metro!asstdc.scgt.oz.au!nsw.news.telstra.net!act.news.telstra.net!psgrain!charnel.ecst.csuchico.edu!newshub.csu.net!csulb.edu!news.sgi.com!news.mathworks.com!newsfeed.internetmci.com!news-in2.uu.net!news.gtn.com!gtnduss1.du.gtn.com!knipp!lilly.ping.de!infinity.ping.de!usenet
From: gandalf@infinity.ping.de (Andre Grosse Bley)
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: Re: bpf config for tcpdump
Date: 2 Oct 1996 13:18:32 GMT
Organization: Gandalf's Baustelle, private usenetsite in germany, root at work
Lines: 11
Message-ID: <52tq38$kl@infinity.ping.de>
References: <52gl4e$osr@sisscoe.sisnet.ssku.k12.ca.us>
    <52j9eg$50u@infinity.ping.de> <52piui$14h@newsbr.eunet.fr>
NNTP-Posting-Host: infinity.ping.de
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Newsreader: knews 0.9.7

In article <52piui$14h@newsbr.eunet.fr>,
	fgm@osinet.fr (Frederic G. MARAND) writes:
>>#  The `bpfilter' pseudo-device enables the Berkeley Packet Filter.  Be
>>#  aware of the legal and administrative consequences of enabling this
> Could you please make us aware of these legal and administrative
> consequences, at least sketchily ?

BPF allows the administrator to read the whole traffic on the LAN 
segment his machine is connected to. 
(you may sniff for passwords, emails, private talks and so on!)
On the other hand it's very useful for network debugging.