Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 6 Apr 2000 14:57:08 -0700 
From:      Matt Wilbur <Matt@photon.com>
To:        "'Jon Rust'" <jpr@vcnet.com>, "'freebsd-questions@FreeBSD.ORG'" <freebsd-questions@FreeBSD.ORG>
Subject:   RE: tcpdump | tcpshow, and buffering
Message-ID:  <0565C6717839D3119BAC009027719565238EC5@silversurfer.photon.com>

next in thread | raw e-mail | index | archive | help
Hi Jon,

Use the -l option to tcpdump to make it line buffered...

I like tcpdump -lenx host foo.bar.com and port 53 | tcpshow -cooked ...

Hope this helps
-Matt

> 
> I've been trying to use tcpdump and tcpshow to snoop my network on 
> occassion. Mostly to watch what lusers are doing when they can't get 
> into our mail server (wrong pass, username, etc). The command line is:
> 
>    tcpdump -enxs 1508 host blah.blah.com and port 110 | 
> tcpshow -cooked


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?0565C6717839D3119BAC009027719565238EC5>