Sponsored Content
Operating Systems Linux Debian tcpdump filter (mis)behaviour Post 302506591 by Hollinch on Monday 21st of March 2011 09:56:44 AM
Old 03-21-2011
OK I found it, with Google's help...

Apparently I need to add 'vlan and ...' to my filter expression when VLANs are used. Without filter expression, tcpdump and libpcap just output everything, but as soon as filters are specified, the vlan tagging needs to be specified.

See here Blog Stéphane Bortzmeyer: Un exemple de panne amusante de tcpdump

Hope it is useful to others as well.
 

7 More Discussions You Might Find Interesting

1. Programming

How To Use tcpdump

I have two net-card. one is 172.16.24.99(ENG) ,another is 172.16.25.99(ENG-B). Both masks is 255.255.255.0. I will monitor data on the tcp port 8055 in ENG, How do I set option of tcpdump command (2 Replies)
Discussion started by: chenhao_no1
2 Replies

2. UNIX for Dummies Questions & Answers

tcpdump

does anybody know what the -d -dd and -ddd options are used for ? thanks (2 Replies)
Discussion started by: ant04
2 Replies

3. Shell Programming and Scripting

Report a missing property and property value mis match script.

Hi All, I have 2 properties files - one is a master templete and other one is a node specific properties file, I need to comapre these 2 properties files and make sure the node Specific properties file contains all the properties in the master temple properties file else report the missing... (5 Replies)
Discussion started by: jayka
5 Replies

4. Debian

Tcpdump Help !

Hi. Need Help with TcpDump Trying to sniff associatio-request with tcpdump but when i run this tcpdump -i eth0 wlan subtype assoc-req i get this error can anyone help me with this error ? Thanks alot !!:) (1 Reply)
Discussion started by: SoulZB
1 Replies

5. IP Networking

TCPdump

I've recently started learning to use TCPdump, and I find it pretty interesting. There's one thing I don't understand. When I tell it to capture packets on, say, the WiFi interface en1, it often captures packets sent or received by other hosts on the network. How can it do this? My... (3 Replies)
Discussion started by: Ultrix
3 Replies

6. Shell Programming and Scripting

sed to remove newline chars based on pattern mis-match

Greetings Experts, I am in AIX; I have a file generated through awk after processing the input files. Now I need to replace or remove the new-line characters on all lines that doesn't have a ; which is the last character on the line. I tried to use sed 's/\n/ /g' After checking through the... (6 Replies)
Discussion started by: chill3chee
6 Replies

7. War Stories

The (Mis)Information Age – The End of the World as We Know It and What Vault7 Teaches Us

I hope you will enjoy reading this essay I wrote: The (Mis)Information Age – The End of the World as We Know It and What Vault7 Teaches Us If you are a true "IT person" i.e. a software developer, code or deep system admin, I think you will resonate with the theme of my essay. I could... (8 Replies)
Discussion started by: Neo
8 Replies
ovs-tcpundump(1)						Open vSwitch Manual						  ovs-tcpundump(1)

NAME
ovs-tcpundump - convert ``tcpdump -xx'' output to hex strings SYNOPSIS
ovs-tcpundump < file Common options: [-h | --help] [-V | --version] DESCRIPTION
The ovs-tcpundump program reads tcpdump -xx output on stdin, looking for hexadecimal packet data, and dumps each Ethernet as a single hexa- decimal string on stdout. This format is suitable for use with the ofproto/trace command supported by ovs-vswitchd(8) via ovs-appctl(8). At least two -x or -X options must be given, otherwise the output will omit the Ethernet header, which prevents the output from being using with ofproto/trace. OPTIONS
-h, --help Prints a brief help message to the console. -V, --version Prints version information to the console. SEE ALSO
ovs-appctl(8), ovs-vswitchd(8), ovs-pcap(1), tcpdump(8), wireshark(8). Open vSwitch December 2010 ovs-tcpundump(1)
All times are GMT -4. The time now is 11:00 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy