Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 22 Oct 2000 21:23:16 -0700
From:      "Crist J . Clark" <cjclark@reflexnet.net>
To:        Stanley Hopcroft <Stanley.Hopcroft@IPAustralia.Gov.AU>
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: tcpdump doesn't work properly (filter expressions break normal output) in 4.0, 4.1-R
Message-ID:  <20001022212316.F75251@149.211.6.64.reflexcom.com>
In-Reply-To: <Pine.BSF.4.21.0010231503460.20386-100000@stan.aipo.gov.au>; from Stanley.Hopcroft@IPAustralia.Gov.AU on Mon, Oct 23, 2000 at 03:05:10PM %2B1100
References:  <Pine.BSF.4.21.0010231457320.20386-100000@stan.aipo.gov.au> <Pine.BSF.4.21.0010231503460.20386-100000@stan.aipo.gov.au>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Oct 23, 2000 at 03:05:10PM +1100, Stanley Hopcroft wrote:
> 
> On Mon, 23 Oct 2000, Stanley Hopcroft wrote:
> 
> > Dear Ladies and Gentlemen,
> > 
> > I am writing to say that I think there is something wrong with
> > libpcap/bpf/tcpdump shipped with 4.0-RELEASE and 4.1-RELEASE.
> > 
> > The problem is that as soon as filter expression is given to tcpdump eg
> > tcpdump -x -s1500 -l port telnet, then the only packets displayed are
> > those from the localhost (that running tcpdump); the replies are *not*
> > shown.
> > 
> > If the filter is removed, both client and server packets are displayed.
> 
> I think this is a FreeBSD problem since ethereal behaves exactly the
> same way (and therefore the problem is perhaps in libpcap or the bpf
> code)

What is your network interface? I have seen odd things from a tunN
interface, but never have had trouble with Ethernet ones.
-- 
Crist J. Clark                           cjclark@alum.mit.edu


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20001022212316.F75251>