Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 10 Nov 2001 21:15:43 -0800
From:      "Crist J. Clark" <cristjc@earthlink.net>
To:        freebsd-questions@FreeBSD.ORG
Subject:   Re: problems with clients behind ipf/ipnat firewall
Message-ID:  <20011110211543.B69195@blossom.cjclark.org>
In-Reply-To: <20011110105933.A74294@nubisci.net>; from guru@nubisci.net on Sat, Nov 10, 2001 at 10:59:33AM -0500
References:  <20011107132853.B7624@nubisci.net> <20011107231359.J301@blossom.cjclark.org> <20011109133729.A21217@nubisci.net> <20011110005436.G51003@blossom.cjclark.org> <20011110105933.A74294@nubisci.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, Nov 10, 2001 at 10:59:33AM -0500, GuRU wrote:
> Out of da blue Crist J. Clark aka (cristjc@earthlink.net) said:
> [snippage ...]
> 
> > > the results are shown at
> > > 	http://www.nubisci.net/guru/tcpshow.fxp0  (public interface)
> > > 	http://www.nubisci.net/guru/tcpshow.fxp1  (private interface)
> > > 
> > > i'm still looking thru the output.  if anything stands out, i'd like to know
> > 
> > Ugh. tcpshow(1) output? How about the tcpdump.fxp[01] files?
> Done.
> 	http://www.nubisci.net/guru/tcpdump.fxp0  (public interface)
> 	http://www.nubisci.net/guru/tcpdump.fxp1  (private interface)

Err, uh, no. The original pcap dump files that you created with,

  # tcpdump -w tcpdump.fxp0 -i fxp0

_That_ "tcpdump.fxp0."

Then I can do stuff like,

  $ tcpdump -vvnr tcpdump.fxp0 udp
  $ tcpdump -vvnr tcpdump.fxp1 icmp && host somehost
  .
  .
  .

And easily analyze the data.

But I'll see if these are usable ('fgrep udp tcpdump.fxp0') for now.
-- 
Crist J. Clark                     |     cjclark@alum.mit.edu
                                   |     cjclark@jhu.edu
http://people.freebsd.org/~cjc/    |     cjc@freebsd.org

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011110211543.B69195>