Date: Tue, 11 Jan 2000 17:58:04 -0600 (CST) From: James Wyatt <jwyatt@rwsystems.net> To: Shino <shino@hakkenden.com> Cc: FreeBSD-ISP <isp@FreeBSD.ORG>, owner-freebsd-questions@FreeBSD.ORG Subject: Re: FW: routed netbeui tcpdump Message-ID: <Pine.BSF.4.10.10001111654390.38142-100000@bsdie.rwsystems.net> In-Reply-To: <NCEFJNEGOFKAEADCKNLPIEKHDDAA.shino@hakkenden.com>
next in thread | previous in thread | raw e-mail | index | archive | help
tcpdump just dumps what the /dev/bpf? sees and that appears to be any valid ENet packet. (incl: DLC, NetBEUI, AppleTalk, LAT) The man page for bpf says 'All packets' arrive when in promiscuous mode. There are flags to restrict tcpdump to 'ip only' or other traffic. Secondarily, are sure the packets are coming from the FreeBSD router boxes? Even network laser printer servers (little EtherJets, etc) can spew junk onto local LANs. It doesn't take long for you to get a list of ENet addresses to guess at what's generating the junk. (See ethereal as well!) Very useful when someone gives you the wrong set of IP addresses, but they at least know where an ENet jack for your FreeBSD laptop is... - Jy@ On Tue, 11 Jan 2000, Shino wrote: > This one kinda went untouched on questions list so I have decided to forward > here and see if anyone can help. [ ... ] > -----Original Message----- > From: owner-freebsd-questions@FreeBSD.ORG > [mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of Shino > Sent: Tuesday, January 11, 2000 10:13 AM > To: Freebsd-Questions > Subject: routed netbeui tcpdump > > I have several router boxes running freebsd RouteD. I thought routed only > passed tcp packets but I am seeing netbeui and ipx packets as well... stuff I > would only expect to see in a bridge situation. Any thoughts on why routed > might be passing netbeui packets? > > Secondarily would tcpdump catch netbeui packets or just tcp packets? [ ... ] To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.10.10001111654390.38142-100000>