From owner-freebsd-questions@FreeBSD.ORG Sat Oct 6 07:12:32 2007 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id C69A816A419 for ; Sat, 6 Oct 2007 07:12:32 +0000 (UTC) (envelope-from freebsd@dreamchaser.org) Received: from nightmare.dreamchaser.org (nightmare.dreamchaser.org [12.32.36.65]) by mx1.freebsd.org (Postfix) with ESMTP id 8784413C455 for ; Sat, 6 Oct 2007 07:12:32 +0000 (UTC) (envelope-from freebsd@dreamchaser.org) Received: from [12.32.36.67] (freshstart.dreamchaser.org. [12.32.36.67]) by nightmare.dreamchaser.org (8.13.6/8.13.6) with ESMTP id l967Eqhg013831; Sat, 6 Oct 2007 01:14:52 -0600 (MDT) (envelope-from freebsd@dreamchaser.org) Message-ID: <470735EE.7050909@dreamchaser.org> Date: Sat, 06 Oct 2007 01:14:54 -0600 From: freebsd@dreamchaser.org User-Agent: Thunderbird 2.0.0.6 (Windows/20070728) MIME-Version: 1.0 To: Christopher Cowart , bc979@lafn.org References: <4706C94D.4030206@dreamchaser.org> <20071006001209.GJ19429@hal.rescomp.berkeley.edu> In-Reply-To: <20071006001209.GJ19429@hal.rescomp.berkeley.edu> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-2.0.2 (nightmare.dreamchaser.org [12.32.36.65]); Sat, 06 Oct 2007 01:14:52 -0600 (MDT) Cc: freebsd-questions@freebsd.org Subject: Re: tcpdump -- non-local traffic not showing X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 06 Oct 2007 07:12:32 -0000 Many thanks; that solved the problem. Gary > You're probably plugged into a switch ("learning bridge"). Switches > partition your collision domain -- they learn which MAC is available on > which port and only send on that port. > > You either need a hub or a really expensive switch (the kind that you > log in to and set up port mirrors). .. > What is your LAN? My guess is that its a router or a switch. In either > case, the router/switch is not forwarding the packets to all the ports. > It retains a table of MAC addresses and the ports they are on. It only > forwards packets to the desired port. A computer on a different port > will not see any of those packets. You have to use a hub or just a > non-learning bridge to get the packets forwarded to all ports. Those > are really hard to find anymore. >