Thanks for sharing? What were we supposed to do with this? Mark Post
-----Original Message----- From: Eddie Chen [mailto:[EMAIL PROTECTED]] Sent: Friday, November 22, 2002 1:52 PM To: [EMAIL PROTECTED] Subject: tcpdump and CIP filter portnumer I was doing a tcpdump to trace a hang condition of a process ... mostly we was looking for nfs on port number 4092. However, we found that clearcase was using port#3157797047 - that is in the trace, the sourceIPaddress.3157797047 to DistIPAddress.nfs . The CIP, then later on, sent back an icmp to VMlinux that the host unreachable - admin prohibited filter
