Re: [tcpdump-workers] Newbie user question: Getting packets from

2004-09-27 Thread Guy Harris
(blah blah blah wrong from address blah blah blah duplicate message dissector blah blah blah time to see whether I can configure Thunderbird to automatically set the from address for tcpdump-workers messages blah blah blah) KEVIN ZEMBOWER wrote: www:~# tcpdump src host centernet.jhuccp.org and

Re: [tcpdump-workers] Newbie user question: Getting packets from

2004-09-27 Thread Guy Harris
KEVIN ZEMBOWER wrote: As you can see, I'm still getting packets from ns1.jhmi.edu on the DNS port. What does the command tcpdump -d src host centernet.jhuccp.org and \( ip proto \\tcp or \\udp \) print? If it helps, I'm using bash 2.05 on a Debian woody (stable, 3.0) distro running kernal

Re: [tcpdump-workers] Newbie user question: Getting packets from

2004-09-27 Thread KEVIN ZEMBOWER
Output is: [EMAIL PROTECTED]:~$ su - Password: www:~# tcpdump -d src host centernet.jhuccp.org and \( ip proto \\tcp or \\udp \) (000) ldh [12] (001) jeq #0x800 jt 2jf 8 (002) ld [26] (003) jeq #0xa281e1c0 jt 4jf 8 (004) ldb [23] (005) jeq