From owner-freebsd-hackers Tue Jul 28 11:36:30 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id LAA11687 for freebsd-hackers-outgoing; Tue, 28 Jul 1998 11:36:30 -0700 (PDT) (envelope-from owner-freebsd-hackers@FreeBSD.ORG) Received: from sumatra.americantv.com (sumatra.americantv.com [207.170.17.37]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id LAA11562 for ; Tue, 28 Jul 1998 11:35:50 -0700 (PDT) (envelope-from jlemon@americantv.com) Received: from right.PCS (right.PCS [148.105.10.31]) by sumatra.americantv.com (8.8.5/8.8.5) with ESMTP id NAA28229; Tue, 28 Jul 1998 13:35:03 -0500 (CDT) Received: (from jlemon@localhost) by right.PCS (8.6.13/8.6.4) id NAA00276; Tue, 28 Jul 1998 13:34:31 -0500 Message-ID: <19980728133430.54771@right.PCS> Date: Tue, 28 Jul 1998 13:34:30 -0500 From: Jonathan Lemon To: Dennis Cc: hackers@FreeBSD.ORG Subject: Re: TCPDUMP References: <199807281435.KAA20752@etinc.com> <19980727143725.A10319@oneinsane.net> <199807281435.KAA20752@etinc.com> <199807281657.MAA21402@etinc.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.61.1 In-Reply-To: <199807281657.MAA21402@etinc.com>; from Dennis on Jul 07, 1998 at 12:55:12PM -0400 Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Jul 07, 1998 at 12:55:12PM -0400, Dennis wrote: > Does anyone who understand the bpf code have an idea why filters > (and trafshow) done work with a serial device with DLT_NULL header? > > tcpdump works fine in raw mode, but if you ad an expression it > doesnt pass the filter tests. Not sure, but you may want to look at src/contrib/libpcap/gencode.c, at the various switch statements for DLT_NULL. Perhaps the offsets are not correct the framing protocol that you are using? -- Jonathan To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message