From owner-freebsd-net Sun Jul 9 16: 4:57 2000 Delivered-To: freebsd-net@freebsd.org Received: from phoenix.dynamine.net (phoenix.dynamine.net [64.14.25.210]) by hub.freebsd.org (Postfix) with ESMTP id A34AA37B59F for ; Sun, 9 Jul 2000 16:04:54 -0700 (PDT) (envelope-from michael@dynamine.net) Received: from angeline (1Cust54.tnt13.sjc4.da.uu.net [63.42.98.54]) by phoenix.dynamine.net (Postfix) with SMTP id 51C3D183970 for ; Sun, 9 Jul 2000 16:04:53 -0700 (PDT) From: "Michael S. Fischer" To: Subject: bpf problem with lo0 interface Date: Sun, 9 Jul 2000 16:04:53 -0700 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) X-Mimeole: Produced By Microsoft MimeOLE V5.00.2919.6600 Importance: Normal Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hi there, Running 4.0-STABLE, I seem to be having difficulty getting any of the packet capture/analysis tools (with the exception of tcpdump, which prints the headers correctly) to give me packet _data_ information when I sniff the lo0 interface. Tools I've tested: - tcpshow(1) - tcpflow(1) Here's an example: # tcpdump -s 1518 -i lo0 -lenx port 143 | tcpshow -cooked -noEtherNames tcpdump: listening on lo0 --------------------------------------------------------------------------- Packet 1 TIME: 16:03:25.186986 LINK: 64:14:25:21:.1:84 -> 0>::å¿:æ#:(L:( type=64.14.25.210.143: <*** No decode support for encapsulated protocol ***> --------------------------------------------------------------------------- Packet 2 TIME: 16:03:25.187048 (0.000062) LINK: 64:14:25:21:.1:03 -> 0>:(::å::$:((:( type=64.14.25.210.1284: <*** No decode support for encapsulated protocol ***> ... and tcpflow shows, well, nothing at all. I am able to successfully sniff/analyze captured data using the two tools above when using the fxp0 interface. Can someone please assist? Thanks, -- Michael S. Fischer AKA Otterley _O_ Lead Hacketeer, Dynamine Consulting, Silicon Valley, CA | Phone: +1 650 533 4684 | AIM: IsThisOtterley | ICQ: 4218323 | "From the bricks of shame is built the hope"--Alan Wilder net.goth To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message