SUMMARY: tcpdump and ping packets

From: Marko Havu (Marko.Havu@havutuote.fi)
Date: Fri Dec 13 2002 - 13:27:02 EST


Thanks for Arrigo Triulzi, who noted that I need to issue the command
"pfconfig +copyall -all" to allow tcpdump to receive packets sent and
received by the kernel-resident protocol software.

 - Marko

My original problem:

> It seems as if only arp and rip packets and packets to and from ports
> 137 and 138 are reported by tcpdump. Pings or ongoing ssh, ftp and http
> connections are not visible at all. I tried unconfiguring ipfilter from
> the kernel, and it didn't have any effect. I'm running Tru64 UNIX V5.1A.
>
> - Marko
>



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:49:02 EDT