Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 23 Oct 2000 15:05:10 +1100 (EST)
From:      Stanley Hopcroft <Stanley.Hopcroft@IPAustralia.Gov.AU>
To:        freebsd-questions@FreeBSD.oRG
Subject:   Re: tcpdump doesn't work properly (filter expressions break normal output) in 4.0, 4.1-R
Message-ID:  <Pine.BSF.4.21.0010231503460.20386-100000@stan.aipo.gov.au>
In-Reply-To: <Pine.BSF.4.21.0010231457320.20386-100000@stan.aipo.gov.au>

next in thread | previous in thread | raw e-mail | index | archive | help

On Mon, 23 Oct 2000, Stanley Hopcroft wrote:

> Dear Ladies and Gentlemen,
> 
> I am writing to say that I think there is something wrong with
> libpcap/bpf/tcpdump shipped with 4.0-RELEASE and 4.1-RELEASE.
> 
> The problem is that as soon as filter expression is given to tcpdump eg
> tcpdump -x -s1500 -l port telnet, then the only packets displayed are
> those from the localhost (that running tcpdump); the replies are *not*
> shown.
> 
> If the filter is removed, both client and server packets are displayed.

I think this is a FreeBSD problem since ethereal behaves exactly the
same way (and therefore the problem is perhaps in libpcap or the bpf
code)

> 
> Thank you.
> 
> Yours sincerely,
> 
> 
> S Hopcroft
> 
> Network Specialist
> IP Australia
> 
> +61 2 6283 3189
> +61 2 6281 1353 FAX
> 
> 
> 



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0010231503460.20386-100000>