Package: tcpdump Version: 4.3.0-1 Severity: minor Two things I noticed while writing a script which parses tcpdump's TCP output:
1. The section starts with this disclaimer: > (N.B.:The following description assumes familiarity with the TCP > protocol described in RFC-793. If you are not familiar with the > protocol, neither this description nor tcpdump will be of much use to > you.) The "nor tcpdump" part is obviously false -- most people I know use tcpdump to look at the link or IP layer, and know little about TCP. 2. The annotated example printouts include things like: > rtsg.1023 > csam.login: P 2:21(19) ack 1 win 4096 > The notation is 'first:last(nbytes)' which means 'sequence numbers > first up to but not including last which is nbytes bytes of user data'. This is indeed what tcpdump used to do -- it corresponds with what Stevens shows in "TCP/IP Illustrated". But in the current tcpdump (and the one in stable), the (nbytes) part is not present, and there is no obvious option to enable it. Not even -v makes a difference. I must assume that nbytes, being last-first, was deemed superfluous at some point and removed, without a corresponding update to the documentation. BR, /Jorgen -- System Information: Debian Release: 7.0 APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 3.4.38 (PREEMPT) Locale: LANG=sv_SE, LC_CTYPE=sv_SE (charmap=ISO-8859-1) Shell: /bin/sh linked to /bin/dash Versions of packages tcpdump depends on: ii libc6 2.13-38 ii libpcap0.8 1.3.0-1 ii libssl1.0.0 1.0.1e-2 tcpdump recommends no packages. tcpdump suggests no packages. -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
