Ethereal-users: [Ethereal-users] Ethereal and FreeBSD IPFW

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Aron Silverton" <ajs@xxxxxxxxxxxx>
Date: Thu, 19 Sep 2002 22:39:11 -0500
What is the order of operations on a FreeBSD machine using ipfw when sniffing packets with Ethereal? It appears that Ethereal is showing me packets *before* they are inspected by the firewall. My firewall logging shows the packets in question being dropped, but Ethereal shows them in the capture. Is there a way to sniff the packets *after* the have traversed the firewall rules?

Thanks,

Aron