From owner-freebsd-net Thu Jul 20 2:16: 1 2000 Delivered-To: freebsd-net@freebsd.org Received: from storm.FreeBSD.org.uk (storm.freebsd.org.uk [194.242.139.170]) by hub.freebsd.org (Postfix) with ESMTP id E505437BE0E for ; Thu, 20 Jul 2000 02:15:57 -0700 (PDT) (envelope-from brian@Awfulhak.org) Received: from hak.lan.Awfulhak.org (hak.nat.Awfulhak.org [172.31.0.12]) by storm.FreeBSD.org.uk (8.9.3/8.9.3) with ESMTP id KAA78167; Thu, 20 Jul 2000 10:15:53 +0100 (BST) (envelope-from brian@Awfulhak.org) Received: from hak.lan.Awfulhak.org (brian@localhost [127.0.0.1]) by hak.lan.Awfulhak.org (8.9.3/8.9.3) with ESMTP id JAA31039; Thu, 20 Jul 2000 09:18:51 +0100 (BST) (envelope-from brian@hak.lan.Awfulhak.org) Message-Id: <200007200818.JAA31039@hak.lan.Awfulhak.org> X-Mailer: exmh version 2.1.1 10/15/1999 To: Slawek Zak Cc: freebsd-net@FreeBSD.org, brian@Awfulhak.org Subject: Re: tcpdump on tun0 strangeness In-Reply-To: Message from Slawek Zak of "20 Jul 2000 01:07:43 +0200." <878zux7m80.fsf@localhost.localnet> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Thu, 20 Jul 2000 09:18:50 +0100 From: Brian Somers Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org There's an outstanding PR on this (19377). I haven't gotten around to looking at it though :-( > I've found a strange bahaviour of tcpdump in 4.1-RC (and 4.0) when > listening on tun0 interface. When I specify the protocol to filter, > tcpdump shows only packets going out. Without the filter I see all the > packets. > > # tcpdump -i tun0 > > Shows all packets when pinging any remote host > > # tcpdump -i tun0 icmp > > Shows only packets going out. > > # tcpdump -i fxp0 icmp (Ethernet link) > > Works just fine too. > > Any ideas?? > -- > `When any government, or any church for that matter, undertakes to say to > its subjects, "This you may not read, this you must not see, this you are > forbidden to know," the end result is tyranny and oppression no matter how > holy the motives' -- Robert A Heinlein, "If this goes on --" > Suavek Zak / PGP: finger://zaks@prioris.mini.pw.edu.pl -- Brian Don't _EVER_ lose your sense of humour ! To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message