Review your favorite Linux distribution.
Go Back > Forums > Linux Forums > Linux - Networking
User Name
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.


  Search this Thread
Old 06-30-2004, 11:30 PM   #1
Registered: Jun 2004
Posts: 256

Rep: Reputation: 30
tcpdump and arp question

how to filter tcpdump so it displays all traffic from a specific Mac address?

how to check/change the arp refresh time under linux?

If I'm using vmware and have it simulate an extra NIC eth0 and eth1, how do filter tcpdump so it shows all traffic through eth1 only?

Sorry if my question sound weird. Barely even know what I am asking.

Old 07-01-2004, 12:05 AM   #2
Senior Member
Registered: Mar 2003
Location: Beautiful BC
Distribution: RedHat & clones, Slackware, SuSE, OpenBSD
Posts: 1,791

Rep: Reputation: 50
you can

tcpdump -vvveX -i eth1|grep "xx:xx:xx:xx:xx:xx"

where xx:xx:xx:xx:xx:xx will be the mac address you want to monitor.
Old 07-01-2004, 12:25 PM   #3
Registered: Oct 2003
Distribution: Just about anything... so long as it is Debain based.
Posts: 297

Rep: Reputation: 30
Not an answer, but perhaps a better method

I use ethereal in place of tcpdump. Ethereal has an X interface and it allows for filtering based on the interface or even by each TCP thread.

Hope this helps,



Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
Strange ARP behavior : A linux server responds to all ARP requests Hdvd21 Linux - Networking 4 10-24-2013 05:02 AM
tcpdump question gauge73 Linux - Newbie 2 08-09-2005 04:37 PM
Many arp requests norman in tcpdump? af_dave Linux - Networking 0 08-21-2004 08:01 AM
tcpdump question Xris718 Linux - Networking 1 12-08-2003 11:42 PM
How to create an proxyarp entry in arp table by using arp command? himalayas Linux - Networking 0 06-04-2003 04:14 AM > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 03:11 AM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration