OPNsense Forum

Archive => 22.7 Legacy Series => Topic started by: proctor on November 30, 2022, 11:10:13 AM

Title: Interface: Diagnostics: Netstat - what is 'flags' - EtherType?
Post by: proctor on November 30, 2022, 11:10:13 AM
Stumpled upon this question while investigating some 'received-errors' at an interface. All the investigated interfaces (ix0 at different opnsense boxes) are connected to a (different) switch with one untagged and a couple of tagged vlans.

The untagged root interface (ix0) on some boxes shows the flag 0x8863 and on the other boxes 0x8963. All tagged interfaces (ix0_vlanX) show the flag 8x8843.

My first guess was the flag is representing the EtherType, but the only corresponding number i found was 0x8863 (PPPoE Discovery Stage). So i think, i am at the wrong way. Can someone point me to the right direction?

--

FYI:
The investigated errors seemed to caused by 802.3 eee. After disabling 802.3 eee at the switch ports the errors are stopped.
Title: Re: Interface: Diagnostics: Netstat - what is 'flags' - EtherType?
Post by: Fright on November 30, 2022, 01:39:17 PM
glad you solved your issues
about flags: afaik they are the same as for ifconfig -a
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST>
(hex representation of alphabetical interface properties)
something like
https://www.ibm.com/support/pages/how-hexadecimal-flags-displayed-ifconfig-are-calculated
Title: Re: Interface: Diagnostics: Netstat - what is 'flags' - EtherType?
Post by: proctor on November 30, 2022, 06:55:36 PM
Thanks, that matches, but leads me to a new issue. Why are some interfaces (0x8963) in promiscuous mode (0x0100)? - At the interface configuration page the 'Promiscuous mode' checkbox is not checked.
Title: Re: Interface: Diagnostics: Netstat - what is 'flags' - EtherType?
Post by: Patrick M. Hausen on November 30, 2022, 07:05:41 PM
Are you runnning a DHCP server on those?  ;)
Title: Re: Interface: Diagnostics: Netstat - what is 'flags' - EtherType?
Post by: proctor on December 02, 2022, 01:06:30 PM
Yes, there is a DHCP server at all ix0 interfaces, but onle some are in the promiscuous mode.
Title: Re: Interface: Diagnostics: Netstat - what is 'flags' - EtherType?
Post by: Patrick M. Hausen on December 02, 2022, 01:09:05 PM
IDS? There are many things that could cause this. DHCP used to be one, but if not all interfaces show promisc, then that seems to have changed.
Title: Re: Interface: Diagnostics: Netstat - what is 'flags' - EtherType?
Post by: proctor on December 02, 2022, 02:01:13 PM
IDS is off for all boxes. I try to keep configuration of all running boxes the same way, that is why i stumbled about this.