LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
LinkBack Search this Thread
Old 12-05-2006, 03:48 PM   #1
trek413
LQ Newbie
 
Registered: Aug 2006
Posts: 15

Rep: Reputation: 0
capturing loopback with tcpdump


I want to capture packets going over loopback without retaining all of the duplicates. Is there anyway to filter this out with tcpdump?

Thanks for your help.
 
Old 12-05-2006, 04:06 PM   #2
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,344

Rep: Reputation: 1945Reputation: 1945Reputation: 1945Reputation: 1945Reputation: 1945Reputation: 1945Reputation: 1945Reputation: 1945Reputation: 1945Reputation: 1945Reputation: 1945
what do you mean by duplicates? if you mean things like restransmissions, or retries of udp conections, then it's not tcpdump's place to regard those packets as anything special, as they are "duplicated" at much higher osi layers than the ip / tcp level's of tcpdump
 
Old 12-06-2006, 08:36 AM   #3
trek413
LQ Newbie
 
Registered: Aug 2006
Posts: 15

Original Poster
Rep: Reputation: 0
sorry, I should've been more clear. On loopback, the packet is sent and received. Tcpdump captures both the outgoing and incoming packets. Is there any way to differentiate between the packets sent by lo and the packets received by lo?

Thanks.
 
Old 12-06-2006, 11:22 AM   #4
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,344

Rep: Reputation: 1945Reputation: 1945Reputation: 1945Reputation: 1945Reputation: 1945Reputation: 1945Reputation: 1945Reputation: 1945Reputation: 1945Reputation: 1945Reputation: 1945
to be honest i'm not seeing that at all. can you show an example output containing this replication? note that as it's a single interface, lo will be sending and recieving between itself. if i do a telnet to localhost i see
Code:
[root@kermit ~]# tcpdump -i lo
17:21:20.038428 IP localhost.localdomain.49645 > localhost.localdomain.telnet: S 1657860734:1657860734(0) win 32792 <mss 16396,sackOK,timestamp 120682619 0,nop,wscale 6>
17:21:20.038812 IP localhost.localdomain.telnet > localhost.localdomain.49645: R 0:0(0) ack 1657860735 win 0
which doesn't have any replications as fasr as a take your use of it to be.

Last edited by acid_kewpie; 12-06-2006 at 11:26 AM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are Off
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Event Capturing rem1986 Linux - General 2 12-13-2005 12:11 PM
Best Capturing tool. mayankjohri Linux - Enterprise 0 01-30-2005 03:12 PM
Screen Capturing monohouse Linux - Software 3 10-30-2004 11:14 AM
Capturing X Events phrontist Linux - Software 1 10-28-2004 08:56 AM
Capturing video with Cinelerra works, capturing video with Xawtv doesn't! seaelf Slackware 0 06-27-2004 05:18 PM


All times are GMT -5. The time now is 09:38 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration