Hi,

On Tue, 23.11.2010 at 11:07:40 -0500, Ted Unangst <ted.unangst@gmail.com> wrote:
quoted text
> On Tue, Nov 23, 2010 at 10:02 AM, Otto Moerbeek <otto@drijf.net> wrote:
> > On Tue, Nov 23, 2010 at 03:16:57PM +0100, Toni Mueller wrote:
> >> # ifconfig em3
> >> em3:
> >> flags=8b43<UP,BROADCAST,RUNNING,PROMISC,ALLMULTI,SIMPLEX,MULTICAST> mtu 1500
> >> B  B  B  B  lladdr 00:30:48:94:0b:21
> >> B  B  B  B  priority: 0
> >> B  B  B  B  media: Ethernet autoselect (1000baseT full-duplex,master)
> >> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> >> B  B  B  B  status: active
> 
> > I would rather investigate why the PROMISC and ALLMULTI flags are set
> > on this interface.
> 
> trunked?

thanks for your input. No, the interface is configured in a very
straightforward way without any bells and whistles. It has a four IPv4
addresses, plus one auto-generated IPv6 address (link layer local).
I don't use briding and didn't enable multicast in /etc/sysctl.conf,
either.

There are also no processes specifically using this interface (ie, no
tcpdump or similar). This is the whole process list:


$ ps ax
  PID TT  STAT       TIME COMMAND
    1 ??  Is      0:00.01 /sbin/init
 2399 ??  Is      0:00.00 ntpd: [priv] (ntpd)
19341 ??  I       0:00.09 ntpd: ntp engine (ntpd)
12690 ??  I       0:00.01 ntpd: dns engine (ntpd)
11247 ??  Is      0:00.02 /usr/sbin/sshd -u0
 2024 ??  Is      0:00.31 cron
32158 ??  Ss      0:01.19 sendmail: accepting connections (sendmail)
24559 ??  Ss      0:17.55 bgpd: parent (bgpd)
12368 ??  S       0:15.77 bgpd: session engine (bgpd)
18994 ??  S       1:05.98 bgpd: route decision engine (bgpd)
 8611 ??  Ss      0:02.39 ifstated -v
11105 ??  S       0:05.28 syslogd -n -a /var/www/dev/log -a /var/empty/dev/log
27237 ??  Is      0:00.03 syslogd: [priv] (syslogd)
27968 ??  S       0:00.51 pflogd: [running] -s 256 -i pflog0 -f /var/log/pflog (pflogd)
13936 ??  Is      0:00.05 pflogd: [priv] (pflogd)
31560 ??  Ss      0:00.39 sshd: user@ttyp0 (sshd)
29917 ??  Ss      0:00.44 sshd: user@ttyp1 (sshd)
29148 p0  Ss+     0:00.03 bash
16540 p1  Ss      0:00.04 bash
28953 p1  R+/1    0:00.00 ps -ax
17757 C0- S       0:00.53 runsvdir -P /var/service log: ...........................................................................
 9629 C0  Is+     0:00.00 /usr/libexec/getty std.9600 ttyC0
  397 C1  Is+     0:00.00 /usr/libexec/getty std.9600 ttyC1
25085 C2  Is+     0:00.00 /usr/libexec/getty std.9600 ttyC2
32349 C3  Is+     0:00.00 /usr/libexec/getty std.9600 ttyC3
12522 C5  Is+     0:00.00 /usr/libexec/getty std.9600 ttyC5
$


None of these suggests to me that ALLMULTI or PROMISC should be on,
and ifconfig's man page doesn't suggest that I can easily turn
them off.

If you have any suggestions about how to debug this, I'm all ears.


TIA!



Kind regards,
--Toni++