From owner-freebsd-isp Mon Nov 27 22:53:41 2000 Delivered-To: freebsd-isp@freebsd.org Received: from pericles.IPAustralia.gov.au (pericles.IPAustralia.gov.au [202.14.186.30]) by hub.freebsd.org (Postfix) with ESMTP id 3E4DC37B402 for ; Mon, 27 Nov 2000 22:53:38 -0800 (PST) Received: (from smap@localhost) by pericles.IPAustralia.gov.au (8.9.3/8.9.3) id RAA48285; Tue, 28 Nov 2000 17:52:44 +1100 (EST) (envelope-from anwsmh@IPAustralia.Gov.AU) Received: from disc-4-161.aipo.gov.au(10.0.4.161) by pericles.IPAustralia.gov.au via smap (V2.0) id xma048278; Tue, 28 Nov 00 17:52:39 +1100 Received: from localhost (anwsmh@localhost) by stan.aipo.gov.au (8.9.3/8.9.3) with ESMTP id RAA07301; Tue, 28 Nov 2000 17:52:39 +1100 (EST) (envelope-from anwsmh@IPAustralia.Gov.AU) X-Authentication-Warning: stan.aipo.gov.au: anwsmh owned process doing -bs Date: Tue, 28 Nov 2000 17:52:38 +1100 (EST) From: Stanley Hopcroft X-Sender: anwsmh@stan.aipo.gov.au To: Rowan Crowe Cc: freebsd-isp@FreeBSD.ORG Subject: Re: tcpdump & user-ppp/tunX In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Dear Sir, > Hi all, > > velvet# tcpdump -qenli tun0 > tcpdump: listening on tun0 > 17:38:47.939979 203.20.114.243.1131 > 203.20.114.197.31488: udp 4 > > Has anyone else noticed that the -e option (show packet size) in tcpdump > doesn't seem to work for tunX devices? Is this a bug, or not supported by > that device? I think that tcpdump does display larger than default packet sizes when used with a tunX device. (tcpdump -x -s1500 works fine for me with FreeBSD 4.1-RELEASE and the Brian Somers patches to make it work with a filter. See PR some time ago). I think you will find that the -e switch is the switch to display ethernet/MAC addresses. I don't know what it does for PPP. I am using user mode ppp (tunX). I can't comment about kernel mode. > > Actually, I just checked and a machine running 3.4R doesn't show it on > pppX devices either, yet a 2.2.8R one does... has something major changed > with the ppp/tun device structure, BPF, or tcpdump since 2.2.8R? > > Cheers. > > > -- > Rowan Crowe http://www.rowan.sensation.net.au/ > Sensation Internet Services http://info.sensation.net.au/ > Melbourne, Australia Phone: +61-3-9388-9260 > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message