From owner-freebsd-questions Sat Nov 10 21:16:17 2001 Delivered-To: freebsd-questions@freebsd.org Received: from harrier.prod.itd.earthlink.net (harrier.mail.pas.earthlink.net [207.217.120.12]) by hub.freebsd.org (Postfix) with ESMTP id 4017637B41E for ; Sat, 10 Nov 2001 21:16:11 -0800 (PST) Received: from dialup-209.247.136.102.dial1.sanjose1.level3.net ([209.247.136.102] helo=blossom.cjclark.org) by harrier.prod.itd.earthlink.net with esmtp (Exim 3.33 #1) id 162myW-0004NA-00 for freebsd-questions@FreeBSD.ORG; Sat, 10 Nov 2001 21:16:08 -0800 Received: (from cjc@localhost) by blossom.cjclark.org (8.11.6/8.11.3) id fAB5FhC69526 for freebsd-questions@FreeBSD.ORG; Sat, 10 Nov 2001 21:15:43 -0800 (PST) (envelope-from cjc) Date: Sat, 10 Nov 2001 21:15:43 -0800 From: "Crist J. Clark" To: freebsd-questions@FreeBSD.ORG Subject: Re: problems with clients behind ipf/ipnat firewall Message-ID: <20011110211543.B69195@blossom.cjclark.org> Reply-To: cjclark@alum.mit.edu References: <20011107132853.B7624@nubisci.net> <20011107231359.J301@blossom.cjclark.org> <20011109133729.A21217@nubisci.net> <20011110005436.G51003@blossom.cjclark.org> <20011110105933.A74294@nubisci.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20011110105933.A74294@nubisci.net>; from guru@nubisci.net on Sat, Nov 10, 2001 at 10:59:33AM -0500 X-URL: http://people.freebsd.org/~cjc/ Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Sat, Nov 10, 2001 at 10:59:33AM -0500, GuRU wrote: > Out of da blue Crist J. Clark aka (cristjc@earthlink.net) said: > [snippage ...] > > > > the results are shown at > > > http://www.nubisci.net/guru/tcpshow.fxp0 (public interface) > > > http://www.nubisci.net/guru/tcpshow.fxp1 (private interface) > > > > > > i'm still looking thru the output. if anything stands out, i'd like to know > > > > Ugh. tcpshow(1) output? How about the tcpdump.fxp[01] files? > Done. > http://www.nubisci.net/guru/tcpdump.fxp0 (public interface) > http://www.nubisci.net/guru/tcpdump.fxp1 (private interface) Err, uh, no. The original pcap dump files that you created with, # tcpdump -w tcpdump.fxp0 -i fxp0 _That_ "tcpdump.fxp0." Then I can do stuff like, $ tcpdump -vvnr tcpdump.fxp0 udp $ tcpdump -vvnr tcpdump.fxp1 icmp && host somehost . . . And easily analyze the data. But I'll see if these are usable ('fgrep udp tcpdump.fxp0') for now. -- Crist J. Clark | cjclark@alum.mit.edu | cjclark@jhu.edu http://people.freebsd.org/~cjc/ | cjc@freebsd.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message