lkml.org 
[lkml]   [2005]   [Sep]   [2]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
DateFri, 2 Sep 2005 14:44:16 -0400
FromJohn McGowan <>
SubjectKernel 2.6.13 breaks libpcap (and tcpdump).
Kernel 2.6.13. Breaks libpcap.

Fedora Core 2, gcc 3.3.3, Pentium III (933MHz)

I had written about my dismay that traceproto and tcptraceroute
no longer worked and suspected that libnet was broken.

It seems that it is libpcap that is broken by kernel 2.6.13 and
tcpdump itself no longer works.
Well, it works ... but not correctly.

Capture data, then look for ICMP messages
(e.g. Time Exceeded errors as in a traceroute)
by filtering the file.

tcpdump -w 1.cap
tcpdump -f "ip proto \icmp" -r 1.cap

That works.


Filter incoming data, looking for ICMP messages:

tcpdump -f "ip proto \icmp"

Well, that catches nothing.


I tried recompiling (source RPM, Fedora Core 2) tcpdump
(libpcap, tcpdump, etc.) and reinstalling. That did not
fix the problem with tcpdump.

It also broke a tethereal script I was using (which I changed
to capture all packets, which works as indicated above, and
then used a '-R', read, filter to display the one's I want).

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-09-02 20:46    [from the cache]
©2003-2010