From owner-freebsd-questions Mon Apr 8 08:57:43 1996 Return-Path: owner-questions Received: (from root@localhost) by freefall.freebsd.org (8.7.3/8.7.3) id IAA05392 for questions-outgoing; Mon, 8 Apr 1996 08:57:43 -0700 (PDT) Received: from who.cdrom.com (who.cdrom.com [204.216.27.3]) by freefall.freebsd.org (8.7.3/8.7.3) with SMTP id IAA05386 for ; Mon, 8 Apr 1996 08:57:41 -0700 (PDT) Received: from longstreet.larc.nasa.gov (longstreet.larc.nasa.gov [128.155.25.82]) by who.cdrom.com (8.6.12/8.6.11) with ESMTP id IAA18152 for ; Mon, 8 Apr 1996 08:57:40 -0700 Received: (from branson@localhost) by longstreet.larc.nasa.gov (8.6.11/8.6.11) id LAA02702 for freebsd-questions@freebsd.org; Mon, 8 Apr 1996 11:58:41 -0400 From: Branson Matheson Message-Id: <199604081558.LAA02702@longstreet.larc.nasa.gov> Subject: Violently pulling out my hair To: freebsd-questions@freebsd.org (FreeBSD Questions) Date: Mon, 8 Apr 1996 11:58:40 -0400 (EDT) X-Mailer: ELM [version 2.4 PL21] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-questions@freebsd.org X-Loop: FreeBSD.org Precedence: bulk Ok... tcpdump manpage gently describes the wonderful way to montior packets from an ethernet address as follows: ether host ehost True if either the ethernet source or destination address is ehost. So I tried: root@garion > tcpdump ether host gw.hq.ferg.com tcpdump: only ethernet/FDDI supports link-level host name Grrr... OK.. there IS an entry in my ethers file.. looks like: 08:0:3e:0:24:f3 gw.hq.ferg.com Allright so next i tried... branson@garion #tcpdump ether host 08:00:09:d4:65:ff tcpdump: ethernet address used in non-ether expression This is really frustrating.. can any one help? -branson -- ======================================================================== branson matheson | branson@widomaker.com Ferguson SysAdmin | http://widomaker.com/~branson