tcpdump help

Ron Peterson ron.peterson at yellowbank.com
Wed Feb 27 16:46:06 EST 2002


On Wed, Feb 27, 2002 at 03:18:12PM -0500, Derek D. Martin wrote:

> But so long as you're on a shared subnet, you can tell tcpdump what host you
> want to pay attention to with the 'host' qualifier.  For example, change
> your tcpdump command to something like
>
> tcpdump -b ip -c 64 -n -nn host <host_to_monitor>

I'm getting the hang of it now.  I also found "promiscuous" mode - which is
how I was expecting tcpdump to operate by default.  That was what was
confusing me.

Now I just need to write a little perl that's not so brittle.

-- 
Ron Peterson                   -o)
87 Taylor Street               /\\
Granby, MA  01033             _\_v
https://www.yellowbank.com    ---- 



More information about the Discuss mailing list