Re: interface bonding

From: Richard Bejtlich (
Date: 01/09/04

  • Next message: Jez Hancock: "Re: Problem with DNS (UDP) queries"
    Date: Fri, 9 Jan 2004 13:52:55 -0800 (PST)

    Ruslan wisely encouraged me to post the end result of
    my interface bonding quest. Here's how I bring up
    interfaces sf2 and sf3 against a new ngeth0 interface.
     I sniff the ngeth0 interface to see both TX outputs
    from my NetOptics tap:

    kldload ng_ether
    ifconfig sf2 promisc -arp up
    ifconfig sf3 promisc -arp up

    ngctl -f - << EOF
    mkpeer eiface dummy ether
    name .:dummy bond0

    ngctl mkpeer bond0: one2many ether one
    ngctl connect sf2: bond0:ether lower many0
    ngctl connect sf3: bond0:ether lower many1

    ifconfig ngeth0 -arp up

    Thanks to everyone who provided input.


    Richard Bejtlich

    Do you Yahoo!?
    Yahoo! Hotjobs: Enter the "Signing Bonus" Sweepstakes
    _______________________________________________ mailing list
    To unsubscribe, send any mail to ""

  • Next message: Jez Hancock: "Re: Problem with DNS (UDP) queries"

    Relevant Pages

    • Re: interface bonding
      ... sf2 and sf3 are real interfaces connected to my 10/100 ... ngctl mkpeer ngeth0: one2many lower one ...
    • Re: netgraph arp issues vs linux veth
      ... still had to add the upper hooks up of the ngeth0 device to the bridge for it ... When I set this up with more than one virtual interface it appeared ... > Hook the lower and upper hooks of the physical interface up to the bridge. ... >>a sniff on the spoof machine listed this while pinging the remote machine ...
    • Creating span port using netgraph
      ... Basically, the span interface should receive a copy of all IP packets seen on my real network interfaces, with the purpose that snort can snoop this interface. ... ngctl mkpeer ngeth0: one2many lower one ...