From owner-freebsd-questions@FreeBSD.ORG Thu May 10 19:46:49 2007 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 60CAC16A40A for ; Thu, 10 May 2007 19:46:49 +0000 (UTC) (envelope-from cswiger@mac.com) Received: from mail-out4.apple.com (mail-out4.apple.com [17.254.13.23]) by mx1.freebsd.org (Postfix) with ESMTP id 4106913C45E for ; Thu, 10 May 2007 19:46:49 +0000 (UTC) (envelope-from cswiger@mac.com) Received: from relay5.apple.com (relay5.apple.com [17.128.113.35]) by mail-out4.apple.com (Postfix) with ESMTP id 360FEE833A; Thu, 10 May 2007 12:46:49 -0700 (PDT) Received: from relay5.apple.com (unknown [127.0.0.1]) by relay5.apple.com (Symantec Mail Security) with ESMTP id 2648B29C019; Thu, 10 May 2007 12:46:49 -0700 (PDT) X-AuditID: 11807123-9e88abb0000065b6-9b-464376a97e03 Received: from [17.214.13.96] (cswiger1.apple.com [17.214.13.96]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by relay5.apple.com (Apple SCV relay) with ESMTP id 1C77830400D; Thu, 10 May 2007 12:46:49 -0700 (PDT) In-Reply-To: <340a29540705101219xc2aa398i818c76c09f8efce8@mail.gmail.com> References: <340a29540705101219xc2aa398i818c76c09f8efce8@mail.gmail.com> Mime-Version: 1.0 (Apple Message framework v752.2) Content-Type: text/plain; charset=US-ASCII; format=flowed Message-Id: Content-Transfer-Encoding: 7bit From: Chuck Swiger Date: Thu, 10 May 2007 12:46:49 -0700 To: Andrew Falanga X-Mailer: Apple Mail (2.752.2) X-Brightmail-Tracker: AAAAAA== Cc: freebsd-questions Subject: Re: Can't get the syntax correct for my tcpdump command X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 May 2007 19:46:49 -0000 On May 10, 2007, at 12:19 PM, Andrew Falanga wrote: > I want to capture only the IPv6 UDP traffic from my FreeBSD box to a > host I'm trying to mount through NFS. A couple of days ago, I got it, > but I had to kill that terminal session abnormally and the commands > aren't in my history. So, I have something like this, > > tcpdump -v -s 192 -i fxp0 ip6 host remote > > The above works. However, when I try to modify the command to filter > out only the UDP traffic, I've tried something like this: tcpdump -v -s 192 -i fxp0 ip6 host _remote_ and proto \\udp -- -Chuck