The Source of All Evil writes:
> 
> hpeyerl
> Wed Jan 31 15:25:37 EST 1996
> Update of /a/cvsroot/src/usr.sbin/rarpd
> In directory pain.lcs.mit.edu:/b/tmp/cvs-serv25709
> 
> Modified Files:
> 	rarpd.c 
> Log Message:
> interface aliases don't count as individual interfaces and hence don't
> need a seperate bpf. Someone should decide whether to tell netstat
> about this.

I keep wondering whether the bpf stuff should be replaced with an
(easy to produce) RARP protocol socket, MAC protocol raw socket, or
similar kernel hook. The code for it is trivial and needing to do BPF
all the time and take the performance hit on each packet on servers
doesn't feel right. It could also help other things if, for
instance, it was a general MAC protocol hook.

Perry