Tcpdump on Linux-390: The Second Coming

2004-11-11 Thread Kohrs, Steven
I need to revive a thread from late August of this year (http://www2.marist.edu/htbin/wlvtype?LINUX-VM.48926). Rob, you stated: I just checked that the tcpdump that comes with SuSE SLES8 works out-of-the-box for qeth. There is no wrapper thing included, so I believe this was indeed modified to

Re: Tcpdump on Linux-390: The Second Coming

2004-11-11 Thread Rob van der Heij
On Thu, 11 Nov 2004 11:26:29 -0600, Kohrs, Steven [EMAIL PROTECTED] wrote: I need to revive a thread from late August of this year (http://www2.marist.edu/htbin/wlvtype?LINUX-VM.48926). Rob, you stated: I just checked that the tcpdump that comes with SuSE SLES8 works out-of-the-box for qeth.

Re: Tcpdump on Linux-390.

2004-08-20 Thread Rob van der Heij
Vic Cross wrote: On Friday 20 August 2004 07:09, Rob van der Heij wrote: Rv Yep, SuSE had some patches on top that know about the unique aspects of Rv the OSA devices. It was actually a wrapper script written by someone (an IBMer?) to redirect stdin and/or stdout of the tcpdump program and add a

Re: Tcpdump on Linux-390.

2004-08-20 Thread Vic Cross
On Friday 20 August 2004 18:23, Rob van der Heij wrote: Rv I know better than argue with you... I recall the early version had Rv tweaked one of the formats since I could not use the same thing to Rv decode a tcpdump stream from my PC anymore. Good point. If you run tcpdump-qeth -r on a file

Re: Tcpdump on Linux-390.

2004-08-20 Thread Tom Shilson
I am on vacation today so I will try tcpdump-qeth on Monday. I am using qdio qeth on a guest LAN to an OSA card. I am only interested in traffic to and from this vmid. I seem to get either everything on the LAN but with an unknown protocol or, if I specify an expression like host host-name, I

Re: [Linux/390] Re: Tcpdump on Linux-390.

2004-08-20 Thread Mike Kershaw
If you're using a 2.6.x kernel, you can turn on LLC emulation via proc for the device (It's in the channel howto stuff for 2.6, I can find it later). This lets an unmodified tcpdump (and other sniffing tools) work. -m On Fri, Aug 20, 2004 at 07:49:16PM +0200, Rob van der Heij wrote: Tom

Re: [Linux/390] Re: Tcpdump on Linux-390.

2004-08-20 Thread Tom Shilson
Unfortunately this is the 2.4 kernel. Thanks anyway. _/) Tom Shilson ~GEDW VM System Services Aloha Tel: 651-733-7591 tshilson at mmm dot com Fax: 651-736-7689 Linux on 390 Port [EMAIL PROTECTED] wrote on

Tcpdump on Linux-390.

2004-08-19 Thread Tom Shilson
Is there a trick to getting tcpdump to work on zLinux? I can't make it do what I want. Tcpdump on MP-RAS (NCR's *nix) is much better behaved. I am using RedHat 7.2 with kernel 2.4.21. I also tried installing the latest libpcap and tcpdump but no change. Thanks, _/) Tom

Re: Tcpdump on Linux-390.

2004-08-19 Thread David Boyes
What kind of network interface do you have? Some (like QETH) do not have a raw or promiscuous mode, and thus can't do much to capture things that aren't addressed to them. Is there a trick to getting tcpdump to work on zLinux? I can't make it do what I want. Tcpdump on MP-RAS (NCR's *nix) is

Re: Tcpdump on Linux-390.

2004-08-19 Thread Rob van der Heij
Tom Shilson wrote: Is there a trick to getting tcpdump to work on zLinux? I can't make it do what I want. Tcpdump on MP-RAS (NCR's *nix) is much better behaved. I am using RedHat 7.2 with kernel 2.4.21. I also tried installing the latest libpcap and tcpdump but no change. Yep, SuSE had some