From owner-freebsd-questions@FreeBSD.ORG Mon Sep 12 08:00:14 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 287BC16A41F for ; Mon, 12 Sep 2005 08:00:14 +0000 (GMT) (envelope-from petermatulis@yahoo.ca) Received: from web60023.mail.yahoo.com (web60023.mail.yahoo.com [209.73.178.71]) by mx1.FreeBSD.org (Postfix) with SMTP id ACC1B43D49 for ; Mon, 12 Sep 2005 08:00:13 +0000 (GMT) (envelope-from petermatulis@yahoo.ca) Received: (qmail 59795 invoked by uid 60001); 12 Sep 2005 08:00:12 -0000 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.ca; h=Message-ID:Received:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=aEjx6gKtLj/E3HTj5uXs/DnvWQwFsItQC4I2UE+CQ5QKE3dHt+loJGfviRPh1vE9JNGmmKbRWIVUJkGcKDalUi2Z2Ey6vEJVows6QZKiablGmBkSaPi0BBO7/sayzO0pEmKPv0jDye2Y54CZ1F8ow8Be0q5RP8EMqpwxE85MK6U= ; Message-ID: <20050912080012.59793.qmail@web60023.mail.yahoo.com> Received: from [216.252.84.216] by web60023.mail.yahoo.com via HTTP; Mon, 12 Sep 2005 04:00:12 EDT Date: Mon, 12 Sep 2005 04:00:12 -0400 (EDT) From: Peter Matulis To: freebsd-questions@freebsd.org In-Reply-To: <20050912071829.22105.qmail@web25408.mail.ukl.yahoo.com> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Subject: Re: tcpdump problem X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Sep 2005 08:00:14 -0000 You do not have "all the details" with ethereal. That's because you are *telling* tcpdump not to sniff them. You are instructing it to take just the headers with the '-s' switch (zero payload: -s0). Try 1500 instead of 0 and you will get what you desire. -- Peter --- bannour souha wrote: > > Hello, > > I am working on PPPoE. I use FreeBSD 5.3. > I want to capture packets from the interfaces eth and > ppp. I used for that this command "tcpdump -e -i rl0 > -n -s0 -w /home/dump_eth" > when I analyse the packets with ethereal, I have all > details, but when I read the content of the file > "dump_eth" with the command "tcpdump -r dump_zth", I > haven't the whole packet, that's mean, I obtain all > the information but I don't obtain the data. > Have you some idea? I want to have the content of the > packets in hexa to use it in my work. > Can you help me please? > > many thanks, > Souha > > > > > > > ___________________________________________________________________________ > Appel audio GRATUIT partout dans le monde avec le nouveau Yahoo! Messenger > Téléchargez cette version sur http://fr.messenger.yahoo.com > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" > __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com