Packet filtering for DLPI

[David Schumacher]

Attempting to port a Solaris 2.5.1 application that utilizes DLPI and packet filtering to HPUX 11. Successfully sent packets back and forth under DLPI, but need to filter incoming packets to be open only for IP and UDP. Does HPUX 11 support packet filtering of any type?

[rick jones]

well, one way to only see IP and ARP would be to not ifconfig the interface and then bind the IP and ARP saps yourself :)

it is not supported by HP, is only a static (not DLKM) module at present, and I'm not even sure it will work reliably, but I have something called "bpfmod" that does BPF packet filtering as a pushable STREAMS module. in addition, it can aggregate packets into larger buffers. the sources are available from ftp.cup.hp.com under dist/networking/misc/ if you want to give it a shot.

the other option would be to use user-space stuff leveraged from libpcap - for the latest there go to www.tcpdump.org.

[Magnus Ljung]

Have you looked at Darren Reed's IPFilter?

There is a alpha version of IPFilter V4.0
available for hp-ux 11.0 at:

http://coombs.anu.edu.au/ipfilter/