From owner-freebsd-questions Mon Apr 8 11:14:32 1996 Return-Path: owner-questions Received: (from root@localhost) by freefall.freebsd.org (8.7.3/8.7.3) id LAA14202 for questions-outgoing; Mon, 8 Apr 1996 11:14:32 -0700 (PDT) Received: from riley-net170-164.uoregon.edu (riley-net170-164.uoregon.edu [128.223.170.164]) by freefall.freebsd.org (8.7.3/8.7.3) with SMTP id LAA14187 for ; Mon, 8 Apr 1996 11:14:29 -0700 (PDT) Received: (from dwhite@localhost) by riley-net170-164.uoregon.edu (8.6.12/8.6.12) id LAA04478; Mon, 8 Apr 1996 11:55:54 -0700 Date: Mon, 8 Apr 1996 11:55:54 -0700 (PDT) From: Doug White Reply-To: dwhite@resnet.uoregon.edu To: Branson Matheson cc: FreeBSD Questions Subject: Re: Violently pulling out my hair In-Reply-To: <199604081558.LAA02702@longstreet.larc.nasa.gov> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-questions@FreeBSD.org X-Loop: FreeBSD.org Precedence: bulk On Mon, 8 Apr 1996, Branson Matheson wrote: > Ok... tcpdump manpage gently describes the wonderful way to montior > packets from an ethernet address as follows: > > ether host ehost > True if either the ethernet source or destination address is > ehost. > So I tried: > > root@garion > tcpdump ether host gw.hq.ferg.com > tcpdump: only ethernet/FDDI supports link-level host name > > Grrr... Use an IP address instead. Look in arp -a and find the ether-to-ip mapping. (Note the 'host' directive about 3 options above it -- I think you want that if you are trying to pin down a specific host) Doug White | University of Oregon Internet: dwhite@resnet.uoregon.edu | Residence Networking Assistant http://gladstone.uoregon.edu/~dwhite | Computer Science Major