diff options
| author | stilez <stilez@users.noreply.github.com> | 2017-07-30 13:14:16 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2017-07-30 13:14:16 +0100 |
| commit | a0bd0a4fc92d9a57e58b27447929c52bfd362411 (patch) | |
| tree | 7f31d544417a0472a871d31836348331988c8482 /src/usr/local/www/diag_packet_capture.php | |
| parent | f72f2facad9eefd61b4aed28a02a462886956af0 (diff) | |
| download | pfsense-a0bd0a4fc92d9a57e58b27447929c52bfd362411.zip pfsense-a0bd0a4fc92d9a57e58b27447929c52bfd362411.tar.gz | |
important exclusion - update help text for packets dropped by NIC / offload
Say that non-promiscuous mode doesn't see packets dropped by NIC.
(promiscuous detection relies mainly on different responses if a packet is dropped by NIC or kernel, so corollary is that non-promisc won't see certain packets *even if directed at the host*)
Diffstat (limited to 'src/usr/local/www/diag_packet_capture.php')
| -rwxr-xr-x | src/usr/local/www/diag_packet_capture.php | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/src/usr/local/www/diag_packet_capture.php b/src/usr/local/www/diag_packet_capture.php index b8b357e..ecd09ca 100755 --- a/src/usr/local/www/diag_packet_capture.php +++ b/src/usr/local/www/diag_packet_capture.php @@ -315,9 +315,9 @@ $section->addInput(new Form_Checkbox( 'Promiscuous', 'Enable promiscuous mode', $promiscuous -))->setHelp('%1$sNon-promiscuous mode captures only traffic that is directly relevant to the host (sent by it, sent or broadcast to it, or routed through it). ' . - '%2$s%3$sPromiscuous mode%4$s ("sniffing") captures all data seen by the adapter, whether or not related to the host, ' . - 'but in some cases may have undesirable side effects and not all adapters support this option. Click Info for details %5$s' . +))->setHelp('%1$sNon-promiscuous mode captures only traffic that is directly relevant to the host (sent by it, sent or broadcast to it, or routed through it) and ' . + 'does not show packets that are ignored at network adapter level.%2$s%3$sPromiscuous mode%4$s ("sniffing") captures all data seen by the adapter, whether ' . + 'or not it is valid or related to the host, but in some cases may have undesirable side effects and not all adapters support this option. Click Info for details %5$s' . 'Promiscuous mode requires more kernel processing of packets. This puts a slightly higher demand on system resources, especially ' . 'on very busy networks or low power processors. The change in packet processing may allow a hostile host to detect that an adapter is in promiscuous mode ' . 'or to \'fingerprint\' the kernel (see %6$s). Some network adapters may not support or work well in promiscuous mode (see %7$s).%8$s', |
