HP 800 HP DLPI Programmer's Guide - Page 29

Promiscuous Mode Clarifications, Fine-grained Privileges

Page 29 highlights

NOTE Introduction to DLPI Promiscuous Mode Clarifications Promiscuous Mode Clarifications The following definitions are being defined for the various levels of promiscuous mode. DL_PROMISC_PHYS-If enabled before the STREAM has been bound (with the DL_BIND_REQ primitive), the DLPI user receives all traffic on the wire regardless of SAP or address. If enabled after the STREAM has been bound, the DLPI user receives all traffic on the wire that matches the protocol(s) the user has bound to on the promiscuous STREAM. This includes protocols bound with the DL_SUBS_BIND_REQ. DL_PROMISC_SAP-If enabled before the STREAM has been bound (with the DL_BIND_REQ primitive), the DLPI user receives all traffic destined for this interface (physical addresses, broadcast addresses or bound multicast addresses) that matches any SAP enabled on that interface. If enabled after the STREAM has been bound, the DLPI user receives only those packets originally destined for the interface that match one of the protocol(s) bound on the promiscuous STREAM. DL_PROMISC_MULTI-Before the STREAM has been bound (with the DL_BIND_REQ primitive), the DLPI user receives all multicast packets on the wire regardless of the SAP. After the STREAM has been bound, the DLPI user receives all multicast packets that match one of the protocol(s) bound on the promiscuous STREAM. Fine-grained Privileges Starting HP-UX 11i v3, HP DLPI allows enabling and disabling of promiscuous mode only for users with the PRIV_NETPROMISCUOUS privilege. For more information on the fine-grained privileges, see "Fine-grained Privileges" on page 17. Each LAN interface currently allows only one unbound stream to enable the promiscuous mode service. Chapter 1 29

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226

Introduction to DLPI
Promiscuous Mode Clarifications
Chapter 1
29
Promiscuous Mode Clarifications
The following definitions are being defined for the various levels of
promiscuous mode.
DL_PROMISC_PHYS
If enabled before the STREAM has been bound
(with the DL_BIND_REQ primitive), the DLPI user receives all traffic on
the wire regardless of SAP or address. If enabled after the STREAM has
been bound, the DLPI user receives all traffic on the wire that matches
the protocol(s) the user has bound to on the promiscuous STREAM. This
includes protocols bound with the DL_SUBS_BIND_REQ.
DL_PROMISC_SAP
If enabled before the STREAM has been bound
(with the DL_BIND_REQ primitive), the DLPI user receives all traffic
destined for this interface (physical addresses, broadcast addresses or
bound multicast addresses) that matches any SAP enabled on that
interface. If enabled after the STREAM has been bound, the DLPI user
receives only those packets originally destined for the interface that
match one of the protocol(s) bound on the promiscuous STREAM.
DL_PROMISC_MULTI
Before the STREAM has been bound (with the
DL_BIND_REQ primitive), the DLPI user receives all multicast packets
on the wire regardless of the SAP. After the STREAM has been bound,
the DLPI user receives all multicast packets that match one of the
protocol(s) bound on the promiscuous STREAM.
Fine-grained Privileges
Starting HP-UX 11i v3, HP DLPI allows enabling and disabling of
promiscuous mode only for users with the PRIV_NETPROMISCUOUS
privilege.
For more information on the fine-grained privileges, see
Fine-grained
Privileges
on page 17.
NOTE
Each LAN interface currently allows only one unbound stream to enable
the promiscuous mode service.