From owner-freebsd-hackers Fri Oct 23 23:10:21 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id XAA19709 for freebsd-hackers-outgoing; Fri, 23 Oct 1998 23:10:21 -0700 (PDT) (envelope-from owner-freebsd-hackers@FreeBSD.ORG) Received: from sasami.jurai.net (sasami.jurai.net [207.153.65.3]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id XAA19704 for ; Fri, 23 Oct 1998 23:10:19 -0700 (PDT) (envelope-from winter@jurai.net) Received: from localhost (winter@localhost) by sasami.jurai.net (8.8.8/8.8.7) with SMTP id CAA17713; Sat, 24 Oct 1998 02:09:41 -0400 (EDT) Date: Sat, 24 Oct 1998 02:09:41 -0400 (EDT) From: "Matthew N. Dodd" To: Jacques Vidrine cc: Robert Butler , freebsd-hackers@FreeBSD.ORG Subject: Re: Anybody know if there is any decoding capability in tcpdump? In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Wed, 21 Oct 1998, Jacques Vidrine wrote: > ``tcpshow's output is simular to Sun Solaris's snoop(1M) command for > network packet capture and inspection.'' > > Note however that it is not real time. It reads a tcpdump packet > output file. While mostly corect, you can use tcpdump and tcpshow in concert over a pipe to effect realtime display. While it is somewhat more cumbersome than snoop, I kind of like having 2 simple (sic) commands rather than 1 large one. -- | Matthew N. Dodd | 78 280Z | 75 164E | 84 245DL | FreeBSD/NetBSD/Sprite/VMS | | winter@jurai.net | This Space For Rent | ix86,sparc,m68k,pmax,vax | | http://www.jurai.net/~winter | Are you k-rad elite enough for my webpage? | To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message