From owner-freebsd-net@FreeBSD.ORG Thu Jul 26 13:24:16 2012 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 02996106582E for ; Thu, 26 Jul 2012 13:24:15 +0000 (UTC) (envelope-from mah.s.369@gmail.com) Received: from mail-qa0-f54.google.com (mail-qa0-f54.google.com [209.85.216.54]) by mx1.freebsd.org (Postfix) with ESMTP id 70C8E8FC0A for ; Thu, 26 Jul 2012 13:24:15 +0000 (UTC) Received: by qaat11 with SMTP id t11so1258111qaa.13 for ; Thu, 26 Jul 2012 06:24:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=8YyvSSmi93gQcobYjsEyH5JzZJzx/tmM/eUVl2yun3w=; b=Yvx+qoZddrRruB8w7Htp5qlFE7jjuzCb/xRfCTmhQJwy3qZ6kTcE+/o3NndG9DvV93 95OAxSivO9eMdiCJJIpGWxUNvYU2m3MlVtswUzT+2R7micZkDCllZK0+Y8/NuB+2Er+h FlkYm+1YOocfU8NEnyc9aYLlgYc4wGdaXLiW1WSTbwOb87up1ngrTfJXYH+ayADrSzDA 1aQzkcZBvZDGqgpHjzXfLKHAbNUzpzbH+gvyUTqzrahsU2TCwF1R2DQcwJ36LAtgTmLh tuPK7JmjJe6vZnBAtSdqrVb0buvUDzR/75h9yW2bY7vV9RFcXXxFFOlsJRAbwGqX1b0L z4jA== MIME-Version: 1.0 Received: by 10.224.203.132 with SMTP id fi4mr2841709qab.76.1343309053912; Thu, 26 Jul 2012 06:24:13 -0700 (PDT) Received: by 10.49.86.196 with HTTP; Thu, 26 Jul 2012 06:24:13 -0700 (PDT) In-Reply-To: <20120726092549.GA3153@insomnia.benzedrine.cx> References: <20120726092549.GA3153@insomnia.benzedrine.cx> Date: Thu, 26 Jul 2012 06:24:13 -0700 Message-ID: From: m s To: Daniel Hartmeier Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: freebsd-net@freebsd.org Subject: Re: tcpdump in freebsd X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 26 Jul 2012 13:24:16 -0000 It works correct.Thanks for your help. On Thu, Jul 26, 2012 at 2:25 AM, Daniel Hartmeier wrote: > On Thu, Jul 26, 2012 at 08:35:29AM +0000, m s wrote: > > > hi all. I want to use tcpdump just for input or just for outout > > packet.isthis possible ? if no is there any other command that do > > this? > > If filtering by source MAC (or IP) is not enough, you can patch tcpdump > to hack in '-a in|out' using pcap_setdirection(). > > HTH, > Daniel >