From owner-freebsd-questions  Sat Jun 24 22:42:31 2000
Delivered-To: freebsd-questions@freebsd.org
Received: from mail.hellasnet.gr (mail.hellasnet.gr [212.54.192.3])
	by hub.freebsd.org (Postfix) with ESMTP id 67E0F37B7A9
	for <freebsd-questions@FreeBSD.ORG>; Sat, 24 Jun 2000 22:42:28 -0700 (PDT)
	(envelope-from keramida@ceid.upatras.gr)
Received: from hades.hell.gr (ppp1.patr.hellasnet.gr [212.54.197.16])
	by mail.hellasnet.gr (8.9.1/8.9.1) with ESMTP id HAA09641;
	Sun, 25 Jun 2000 07:41:27 +0200 (GMT)
Received: (from charon@localhost)
	by hades.hell.gr (8.10.2/8.10.2) id e5OGx1U00846;
	Sat, 24 Jun 2000 19:59:01 +0300 (EEST)
Date: Sat, 24 Jun 2000 19:59:01 +0300
From: Giorgos Keramidas <keramida@ceid.upatras.gr>
To: cjclark@alum.mit.edu
Cc: freebsd-questions@FreeBSD.ORG
Subject: Re: tcpdump(8) Strangeness
Message-ID: <20000624195900.A823@hades.hell.gr>
References: <20000623212558.G481@dialin-client.earthlink.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 1.0i
In-Reply-To: <20000623212558.G481@dialin-client.earthlink.net>; from cristjc@earthlink.net on Fri, Jun 23, 2000 at 09:25:59PM -0700
X-PGP-Fingerprint: 3A 75 52 EB F1 58 56 0D - C5 B8 21 B6 1B 5E 4A C2
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

On Fri, Jun 23, 2000 at 09:25:59PM -0700, Crist J. Clark wrote:
> ...
> However, after things acted strange I tried two commands,
> 
>   # tcpdump '! port 80'
>   # tcpdump 'port 80'
  ...
> In fact, if I run,
> 
>   # tcpdump 'src port 80'
> 
> I get complete silence.
> 
> Does tcpdump not like tun0 or ppp?

I used socket -s 80 on a virtual console, aand then I tried the
following in a couple of other consoles:

	vty0 # tcpdump -i lo0 -n 'src port 80'
	vty2 # lynx http://localhost/

The output on vty0, the tcpdump console, was:

	19:54:22.262329 127.0.0.1.80 > 127.0.0.1.1025:
		S 704709323:704709323(0) ack 704599500 win 57344 <mss 16344> (DF)
	19:54:22.262978 127.0.0.1.80 > 127.0.0.1.1025:
		P 1:2(1) ack 1 win 57344 (DF)
	19:54:22.311808 127.0.0.1.80 > 127.0.0.1.1025:
		. ack 262 win 57344 (DF)

It works on lo0.  I will try it later tonight with ppp0 and tell you if
something strange happens.

-- 
Giorgos Keramidas, < keramida @ ceid . upatras . gr >
For my public key: finger keramida@ceid.upatras.gr


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message