From owner-freebsd-questions  Tue Jun 11  1:52:34 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from icc.cgu.chel.su (gw.csu.ru [195.54.14.5])
	by hub.freebsd.org (Postfix) with ESMTP id E3E0F37B409
	for <questions@FreeBSD.ORG>; Tue, 11 Jun 2002 01:52:30 -0700 (PDT)
Received: from mail.cgu.chel.su (mail.cgu.chel.su [195.54.14.68])
	by icc.cgu.chel.su (8.11.6/8.11.6) with ESMTP id g5B8qRY02241
	(using TLSv1/SSLv3 with cipher EDH-RSA-DES-CBC3-SHA (168 bits) verified NO);
	Tue, 11 Jun 2002 14:52:27 +0600 (YEKST)
	(envelope-from ilia@cgu.chel.su)
Received: from localhost (localhost [127.0.0.1])
	by mail.cgu.chel.su (8.12.3/8.11.2) with ESMTP id g5B8qQZY043891;
	Tue, 11 Jun 2002 14:52:27 +0600 (YEKST)
	(envelope-from ilia@cgu.chel.su)
Date: Tue, 11 Jun 2002 14:52:25 +0600 (YEKST)
From: "Ilia E. Chipitsine" <ilia@cgu.chel.su>
To: Alexander V Zubchenko <stalker@hermes-comp.zp.ua>
Cc: <questions@FreeBSD.ORG>
Subject: Re: ipfw: catching data ?
In-Reply-To: <20020611101327.B87612-100000@server.hermes-comp.zp.ua>
Message-ID: <20020611145155.S43831-100000@mail.cgu.chel.su>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=koi8-r
Content-Transfer-Encoding: 8BIT
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

>
> >
> > which rule should I apply in order to catch what was transmitted during
> > that tcp session ?
> afaiu, that tcp session is lost for You. By default packet data is not
> stored anywhere. You can turn on tcpdump with same rule and try to
> catch next session. Hope, this help.

how can I tune tcpdump + ipfw ?

>
> >
> > Regards, (Наилучшие пожелания)
> > Ilia Chipitsine (Илья Шипицин)
> >
> >
> > To Unsubscribe: send mail to majordomo@FreeBSD.org
> > with "unsubscribe freebsd-questions" in the body of the message
> >
>
> With best wishes to all fbsd community,
> Alexander
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message