site_archiver@lists.apple.com Delivered-To: darwin-kernel@lists.apple.com On Feb 28, 2005, at 5:20 AM, Stephane Sudre wrote: On 28 févr. 05, at 13:01, Stephane Sudre wrote: On 26 févr. 05, at 02:52, Justin Walker wrote: On Feb 25, 2005, at 8:36, Stephane Sudre wrote: _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.a... This email sent to site_archiver@lists.apple.com What kind of operation/action can trigger a KEV_DL_IF_ATTACHED or KEV_DL_IF_DETACHED kernel event? If you haven't tried it yet, consider getting a copy of the xnu kernel source and using 'cscope'. This will let you track down the answer to such questions (as long as the answers lie in the BSD/Mach part of the kernel; cscope does not grok C++ [and it's not alone]). Will have a look but I'm not sure it's going to tell me how I can physically reproduce it. According to the dlil.c code I'm looking at, it looks like that when all proto have been detached (KEV_DL_PROTO_DETACHED) from the interface, the interface is detached (KEV_DL_IF_DETACHED). On the OS version for which I'm trying to see a KEV_DL_IF_DETACHED event , when I disable an interface from the Network Preferences Pane, I see 2 KEV_DL_PROTO_DETACHED events but no KEV_DL_IF_DETACHED event as far as I can tell. KEV_DL_IF_DETACHED is generated when an interface goes away. This happens when the driver call dlil_if_detach. Most driver's don't detach the interface (built-in, airport, PCI). PC Card drivers do detach the interface. PPP creates interfaces on the fly. You will probably see a number of these events for PPP interfaces. You can also trigger these events by creating and removing vlan interfaces using ifconfig. -josh smime.p7s