diff --git a/src/usr/local/www/diag_packet_capture.php b/src/usr/local/www/diag_packet_capture.php index ac66a55df4..b4b095b8d2 100755 --- a/src/usr/local/www/diag_packet_capture.php +++ b/src/usr/local/www/diag_packet_capture.php @@ -315,12 +315,23 @@ $section->addInput(new Form_Checkbox( 'Promiscuous', 'Enable promiscuous mode', $promiscuous -))->setHelp('The packet capture will be performed using promiscuous mode.%1$s' . - 'Note: Some network adapters do not support or work well in promiscuous mode.%1$s' . - 'More: %2$sPacket capture%3$s', - '
', - '', - ''); +))->setHelp('%1$sNon-promiscuous mode captures only data directly relevant to the host (sent by it, sent or broadcast to it, or routed through it). ' . + '%2$s%3$sPromiscuous mode%4$s captures all data seen by the adapter, whether or not related to the host, ' . + 'but in some cases may have undesirable side effects. Click Info for details %5$s' . + 'Promiscuous mode requires more kernel processing of packets. This puts a slightly higher demand on system resources, especially ' . + 'on busy networks or low power processors. The change in packet processing may allow a hostile host to detect that an adapter is in promiscuous mode ' . + 'or to \'fingerprint\' the kernel (see %6$s). Some network adapters may not support or work well in promiscuous mode (see %7$s).%8$s', + + '

', + '

', + '', + '', + '
', + ' [1]' . + ' [2]', + ' [3]', + '

' +); $section->addInput(new Form_Select( 'fam',