Date: Mon, 10 Jul 2000 09:31:51 +0200 (CEST) From: Paul Herman <pherman@frenchfries.net> To: "Michael S. Fischer" <michael@dynamine.net> Cc: freebsd-net@FreeBSD.ORG Subject: Re: bpf problem with lo0 interface Message-ID: <Pine.BSF.4.21.0007100923350.265-100000@bagabeedaboo.security.at12.de> In-Reply-To: <NEBBLEIKJJGDCCJMPEJOEECKCAAA.michael@dynamine.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, 9 Jul 2000, Michael S. Fischer wrote: > Running 4.0-STABLE, I seem to be having difficulty getting any of the packet > capture/analysis tools (with the exception of tcpdump, which prints the > headers correctly) to give me packet _data_ information when I sniff the lo0 > interface. I don't know about tcpflow, but tcpshow doesn't handle NULL layer links (lo0, tun0, etc...). In fact, I think it only handles ethernet type link layers. Sorry, you are stuck with 'tcpdump -x'. For what it's worth, I wrote a program to print packets for just this reason. It is 'packetdump' and is hidden in: http://www.frenchfries.net/paul/tcpstat/tcpstat-1.3pre.tar.gz (after compiling it is in the src/ directory.) The output may not be as tcpshow yet, but it gets the job done. -Paul. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0007100923350.265-100000>