Return to BSD News archive
Path: euryale.cc.adfa.oz.au!newshost.carno.net.au!harbinger.cc.monash.edu.au!munnari.OZ.AU!news.Hawaii.Edu!news.caldera.com!enews.sgi.com!news.mathworks.com!howland.erols.net!feed1.news.erols.com!disgorge.news.demon.net!demon!dispatch.news.demon.net!demon!rill.news.pipex.net!pipex!tank.news.pipex.net!pipex!news.utell.co.uk!usenet
From: brian@shift.utell.net (Brian Somers)
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: Re: tcpdump does not work
Date: 21 May 1997 15:13:46 GMT
Organization: Awfulhak Ltd.
Message-ID: <5lv3fa$ae8@ui-gate.utell.co.uk>
References: <5ls6ub$e52$1@sanson.dit.upm.es>
Reply-To: brian@awfulhak.org, brian@utell.co.uk
NNTP-Posting-Host: shift.utell.net
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Newsreader: knews 0.9.8
Lines: 26
Xref: euryale.cc.adfa.oz.au comp.unix.bsd.freebsd.misc:41361
In article <5ls6ub$e52$1@sanson.dit.upm.es>,
jmrueda@diatel.upm.es (Javier Martin Rueda ) writes:
> Hi.
>
> I've noticed that when I run tcpdump under FreeBSD 2.2.1, I only get
> packets addressed to my machine or broadcasted. Previous releases of
> FreeBSD in the same machine got all packets, regardless of the
> destination address. Has anybody else experienced this?
Have you changed network cards ? I don't know much about this
area, but it certainly works on 2.2.2 using the ep driver.
When you run tcpdump, it's supposed to change your NICs mode
(by default, NICs only read traffic that contains a target MAC
address that's either its own or a broadcast). You should see
a message in /var/log/messages:
May 21 16:10:56 shift /kernel: ep0: promiscuous mode enabled
Check /var/log/messages - maybe you've got an error message
instead of the above.
--
Brian <brian@awfulhak.org> <brian@freebsd.org>
<http://www.awfulhak.org>
Don't _EVER_ lose your sense of humour !