Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 24 Jun 2000 19:59:01 +0300
From:      Giorgos Keramidas <keramida@ceid.upatras.gr>
To:        cjclark@alum.mit.edu
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: tcpdump(8) Strangeness
Message-ID:  <20000624195900.A823@hades.hell.gr>
In-Reply-To: <20000623212558.G481@dialin-client.earthlink.net>; from cristjc@earthlink.net on Fri, Jun 23, 2000 at 09:25:59PM -0700
References:  <20000623212558.G481@dialin-client.earthlink.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Jun 23, 2000 at 09:25:59PM -0700, Crist J. Clark wrote:
> ...
> However, after things acted strange I tried two commands,
> 
>   # tcpdump '! port 80'
>   # tcpdump 'port 80'
  ...
> In fact, if I run,
> 
>   # tcpdump 'src port 80'
> 
> I get complete silence.
> 
> Does tcpdump not like tun0 or ppp?

I used socket -s 80 on a virtual console, aand then I tried the
following in a couple of other consoles:

	vty0 # tcpdump -i lo0 -n 'src port 80'
	vty2 # lynx http://localhost/

The output on vty0, the tcpdump console, was:

	19:54:22.262329 127.0.0.1.80 > 127.0.0.1.1025:
		S 704709323:704709323(0) ack 704599500 win 57344 <mss 16344> (DF)
	19:54:22.262978 127.0.0.1.80 > 127.0.0.1.1025:
		P 1:2(1) ack 1 win 57344 (DF)
	19:54:22.311808 127.0.0.1.80 > 127.0.0.1.1025:
		. ack 262 win 57344 (DF)

It works on lo0.  I will try it later tonight with ppp0 and tell you if
something strange happens.

-- 
Giorgos Keramidas, < keramida @ ceid . upatras . gr >
For my public key: finger keramida@ceid.upatras.gr


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20000624195900.A823>