From owner-freebsd-bugs@FreeBSD.ORG Thu Nov 9 23:50:30 2006 Return-Path: X-Original-To: freebsd-bugs@hub.freebsd.org Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id BC33316A407 for ; Thu, 9 Nov 2006 23:50:30 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id 89E8943D5E for ; Thu, 9 Nov 2006 23:50:30 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.4/8.13.4) with ESMTP id kA9NoU84002121 for ; Thu, 9 Nov 2006 23:50:30 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.4/8.13.4/Submit) id kA9NoUbA002120; Thu, 9 Nov 2006 23:50:30 GMT (envelope-from gnats) Date: Thu, 9 Nov 2006 23:50:30 GMT Message-Id: <200611092350.kA9NoUbA002120@freefall.freebsd.org> To: freebsd-bugs@FreeBSD.org From: Ricardo Nabinger Sanchez Cc: Subject: Re: bin/105334: Error in output of tcpdump X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Ricardo Nabinger Sanchez List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Nov 2006 23:50:30 -0000 The following reply was made to PR bin/105334; it has been noted by GNATS. From: Ricardo Nabinger Sanchez To: Oliver Fromme Cc: FreeBSD-gnats-submit@FreeBSD.org Subject: Re: bin/105334: Error in output of tcpdump Date: Thu, 9 Nov 2006 21:46:59 -0200 Hi Oliver, On Thu, 9 Nov 2006 20:01:12 +0100 (CET) Oliver Fromme wrote: > Now it gets even more interesting. I did what you suggested, > then tried to view the file with "tcpdump -r" (on the same > machine), and it displayed "0" for the port number in all > places where the big 32bit numbers where displayed previously. > > Then I copied the file to a different machine (running an > older FreeBSD 4.x), and tcpdump there displayed all of the > port numbers correctly (i.e. neither big 32bit numbers nor > zero). So it is definitely purely a display problem on my > RELENG_6 machine. The contents of the capture file are OK. I downloaded your files, tried with my tcpdump, yours, also with your libpcap, and got consistent and uniform results, verified together with md5 after checking the output data. There must be some odd problem somewhere on your libc. If you want to check what's going on, you can recompile tcpdump enabling debug info (yours doesn't have), set a breakpoint at "tcp_print" and "tcpport_string", in order to check when the port number is mangled. Hope that helps. Regards. :) -- Ricardo Nabinger Sanchez Powered by FreeBSD "Left to themselves, things tend to go from bad to worse."