From owner-freebsd-net@freebsd.org Tue Feb 6 21:33:28 2018 Return-Path: Delivered-To: freebsd-net@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 3A766F0895B for ; Tue, 6 Feb 2018 21:33:28 +0000 (UTC) (envelope-from davida@truespeed.com) Received: from mail.truespeed.com (mail.truespeed.com [31.210.26.210]) by mx1.freebsd.org (Postfix) with ESMTP id AD17F82AAC for ; Tue, 6 Feb 2018 21:33:27 +0000 (UTC) (envelope-from davida@truespeed.com) Received: from dspam.truespeed.com (localhost [127.0.0.1]) by mail.truespeed.com (Postfix) with SMTP id ADF4F26733E for ; Tue, 6 Feb 2018 21:33:26 +0000 (UTC) Received: from [192.168.0.19] (cpc130860-hawk18-2-0-cust75.know.cable.virginm.net [77.100.156.76]) (Authenticated sender: davida@truespeed.com) by mail.truespeed.com (Postfix) with ESMTPSA id 36DD4267332; Tue, 6 Feb 2018 21:33:26 +0000 (UTC) From: David Athay Message-Id: <64C4AA32-5A49-4D6F-B7A7-93CDB0E59F09@truespeed.com> Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) Subject: Re: tcpdump filter not functioning correctly with igb on FreeBSD 11.1 Date: Tue, 6 Feb 2018 21:33:25 +0000 In-Reply-To: <5A7A19DD.6050400@grosbein.net> Cc: freebsd-net@freebsd.org To: Eugene Grosbein References: <95AA0EAB-B3D6-4E68-83B2-914894D6FB90@truespeed.com> <5A7A1657.4050706@grosbein.net> <5A7A19DD.6050400@grosbein.net> X-Mailer: Apple Mail (2.3273) Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.25 X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Feb 2018 21:33:28 -0000 Same issue with tcpdump from ports, looks like its at the same version. $ which tcpdump /usr/sbin/tcpdump $ /usr/sbin/tcpdump --version tcpdump version 4.9.2 libpcap version 1.8.1 OpenSSL 1.0.2n-freebsd 7 Dec 2017 $ /usr/local/sbin/tcpdump --version tcpdump version 4.9.2 libpcap version 1.8.1 OpenSSL 1.0.2n-freebsd 7 Dec 2017 Ports version is using libpcap from ports too. $ ldd /usr/sbin/tcpdump /usr/sbin/tcpdump: libpcap.so.8 =3D> /lib/libpcap.so.8 (0x800908000) libcasper.so.0 =3D> /lib/libcasper.so.0 (0x800b65000) libcap_dns.so.0 =3D> /lib/casper/libcap_dns.so.0 (0x800d6a000) libcrypto.so.8 =3D> /lib/libcrypto.so.8 (0x801000000) libc.so.7 =3D> /lib/libc.so.7 (0x80146e000) libnv.so.0 =3D> /lib/libnv.so.0 (0x801827000) $ ldd /usr/local/sbin/tcpdump /usr/local/sbin/tcpdump: libcrypto.so.8 =3D> /lib/libcrypto.so.8 (0x800a00000) libpcap.so.1 =3D> /usr/local/lib/libpcap.so.1 (0x800e6e000) libc.so.7 =3D> /lib/libc.so.7 (0x8010ba000) =E2=80=94 David Athay Senior DevOps Engineer TrueSpeed Communications Ltd.=20 > On 6 Feb 2018, at 21:10, Eugene Grosbein wrote: >=20 > 07.02.2018 4:03, David Athay =D0=BF=D0=B8=D1=88=D0=B5=D1=82: >> I was originally using 11.1-RELEASE but I have since updated to = 11-STABLE. Weirdness still persists >>=20 >> $ tcpdump --version >> tcpdump version 4.9.2 >> libpcap version 1.8.1 >> OpenSSL 1.0.2n-freebsd 7 Dec 2017 >>=20 >> $ uname -aUK >> FreeBSD s5.pkfm.banes 11.1-STABLE FreeBSD 11.1-STABLE #2 r328930: Tue = Feb 6 16:05:59 GMT 2018 root@s5.pkfm.banes = :/usr/obj/usr/src/sys/TRUESPEED amd64 = 1101509 1101509 >=20 > Do you have both of port/package version of libpcap and tcpdump = installed? > If yes, make sure you use /usr/sbin/tcpdump. >=20 > If not, could install net/tcpdump an re-do the test using = /usr/local/sbin/tcpdump? >=20 >=20 >=20