[j-nsp] "monitor traffic" broken?

[Daniel Roesen]

On Mon, Nov 01, 2004 at 12:06:05PM -0800, Harry Reynolds wrote:
> As far as only catching 1/2 of the DNS exchange, what interface are you
> monitoring for the egress DNS?

The interface where the active PFE route is pointing to towards the
DNS caches. I've also took a look at the backup path but didn't see
anything there too.

> Monitoring traffic on lo0 should catch
> all RE traffic.

Interestingly, I do see exactly nothing on lo0 nor lo0.0...

> Is it possible that the outgoing query leaves on one
> interface while the reply arrives on the interface being monitored?

Nope, traffic is confirmed to be symmetric.


Best regards,
Daniel

-- 
CLUE-RIPE -- Jabber: dr at cluenet.de -- dr at IRCnet -- PGP: 0xA85C8AA0