Date: Tue, 28 Nov 2000 17:52:38 +1100 (EST) From: Stanley Hopcroft <Stanley.Hopcroft@IPAustralia.Gov.AU> To: Rowan Crowe <rowan@sensation.net.au> Cc: freebsd-isp@FreeBSD.ORG Subject: Re: tcpdump & user-ppp/tunX Message-ID: <Pine.BSF.4.21.0011281748160.7010-100000@stan.aipo.gov.au> In-Reply-To: <Pine.BSF.4.21.0011281739030.50040-100000@velvet.sensation.net.au>
next in thread | previous in thread | raw e-mail | index | archive | help
Dear Sir, > Hi all, > > velvet# tcpdump -qenli tun0 > tcpdump: listening on tun0 > 17:38:47.939979 203.20.114.243.1131 > 203.20.114.197.31488: udp 4 > > Has anyone else noticed that the -e option (show packet size) in tcpdump > doesn't seem to work for tunX devices? Is this a bug, or not supported by > that device? I think that tcpdump does display larger than default packet sizes when used with a tunX device. (tcpdump -x -s1500 works fine for me with FreeBSD 4.1-RELEASE and the Brian Somers patches to make it work with a filter. See PR some time ago). I think you will find that the -e switch is the switch to display ethernet/MAC addresses. I don't know what it does for PPP. I am using user mode ppp (tunX). I can't comment about kernel mode. > > Actually, I just checked and a machine running 3.4R doesn't show it on > pppX devices either, yet a 2.2.8R one does... has something major changed > with the ppp/tun device structure, BPF, or tcpdump since 2.2.8R? > > Cheers. > > > -- > Rowan Crowe http://www.rowan.sensation.net.au/ > Sensation Internet Services http://info.sensation.net.au/ > Melbourne, Australia Phone: +61-3-9388-9260 > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0011281748160.7010-100000>