LinuxQuestions.org
Register a domain and help support LQ
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 11-15-2008, 06:12 PM   #1
sparc86
Member
 
Registered: Jul 2006
Location: Nuremberg, Germany
Distribution: Debian, Gentoo
Posts: 294
Blog Entries: 1

Rep: Reputation: 31
Question tcpdump expressions doesn't works properly. [SOLVED]


Hi all!

I'm under a very weird problem here. I'm trying to use the tcpdump expressions and I'm getting weird results, for example:

#tcpdump port 80 <--when I do it and I try to open a website, I get no results at all. However, if I just try "tcpdump", I can see there's traffic at the http (80) port. WEIRD!

Then, if I try “tcpdump -i eth0 not port 80″, it still shows traffic from the port 80, where I know it shouldn't show the traffic from the 80 but from all the rest.

So it happens to any port I may try.

I know I'm not doing anything wrong, since 1 month ago I did the same thing in a client and it didn't happen. Maybe it's a bug or something, I don't know yet.

My kernel version is the 2.6.27 and I'm using Gentoo Linux.
tcpdump version 3.9.8
libpcap version 0.9.8

Does anyone have any clue about what's happening here?

Thanks in advance!

Last edited by sparc86; 11-15-2008 at 06:47 PM. Reason: solved
 
Old 11-15-2008, 06:46 PM   #2
sparc86
Member
 
Registered: Jul 2006
Location: Nuremberg, Germany
Distribution: Debian, Gentoo
Posts: 294
Blog Entries: 1

Original Poster
Rep: Reputation: 31
Talking

Quote:
Originally Posted by sparc86 View Post
Hi all!

I'm under a very weird problem here. I'm trying to use the tcpdump expressions and I'm getting weird results, for example:

#tcpdump port 80 <--when I do it and I try to open a website, I get no results at all. However, if I just try "tcpdump", I can see there's traffic at the http (80) port. WEIRD!

Then, if I try “tcpdump -i eth0 not port 80″, it still shows traffic from the port 80, where I know it shouldn't show the traffic from the 80 but from all the rest.

So it happens to any port I may try.

I know I'm not doing anything wrong, since 1 month ago I did the same thing in a client and it didn't happen. Maybe it's a bug or something, I don't know yet.

My kernel version is the 2.6.27 and I'm using Gentoo Linux.
tcpdump version 3.9.8
libpcap version 0.9.8

Does anyone have any clue about what's happening here?

Thanks in advance!

Sorry, problem solved! I forgot to specify the ppp0 interface! That's why I wasn't getting it.
 
  


Reply

Tags
tcpdump


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Is there a webcam (snapshotting) app that actually works? Properly?? GrapefruiTgirl Linux - Desktop 6 09-30-2007 07:36 PM
Does Cluster works properly using Storage (MSA500 G2) rrojo7229 Linux - Kernel 0 05-22-2007 12:24 PM
How do I check my Motorola Modem to see if it works properly, What's Next step? saeed144 Linux - Hardware 2 11-15-2006 02:50 PM
My modem no longer works properly! Paul_Lee Linux - Networking 3 09-02-2003 08:43 AM
Macromedia Flash don't works properly on RH9! moisvon Linux - Software 1 08-04-2003 10:32 PM


All times are GMT -5. The time now is 06:31 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration