LinuxQuestions.org
View the Most Wanted LQ Wiki articles.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 06-30-2004, 11:30 PM   #1
blackzone
Member
 
Registered: Jun 2004
Posts: 256

Rep: Reputation: 30
tcpdump and arp question


how to filter tcpdump so it displays all traffic from a specific Mac address?

how to check/change the arp refresh time under linux?

If I'm using vmware and have it simulate an extra NIC eth0 and eth1, how do filter tcpdump so it shows all traffic through eth1 only?




Sorry if my question sound weird. Barely even know what I am asking.

 
Old 07-01-2004, 12:05 AM   #2
ppuru
Senior Member
 
Registered: Mar 2003
Location: Beautiful BC
Distribution: RedHat & clones, Slackware, SuSE, OpenBSD
Posts: 1,791

Rep: Reputation: 46
you can

tcpdump -vvveX -i eth1|grep "xx:xx:xx:xx:xx:xx"

where xx:xx:xx:xx:xx:xx will be the mac address you want to monitor.
 
Old 07-01-2004, 12:25 PM   #3
charon79m
Member
 
Registered: Oct 2003
Distribution: Just about anything... so long as it is Debain based.
Posts: 297

Rep: Reputation: 30
Not an answer, but perhaps a better method

I use ethereal in place of tcpdump. Ethereal has an X interface and it allows for filtering based on the interface or even by each TCP thread.

Hope this helps,

MrKnisely
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Strange ARP behavior : A linux server responds to all ARP requests Hdvd21 Linux - Networking 4 10-24-2013 05:02 AM
tcpdump question gauge73 Linux - Newbie 2 08-09-2005 04:37 PM
Many arp requests norman in tcpdump? af_dave Linux - Networking 0 08-21-2004 08:01 AM
tcpdump question Xris718 Linux - Networking 1 12-08-2003 11:42 PM
How to create an proxyarp entry in arp table by using arp command? himalayas Linux - Networking 0 06-04-2003 04:14 AM


All times are GMT -5. The time now is 05:04 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration