Linux guy says---Ooops... you are correct.. but still why can not see outbound traffic and only inbound
From: John Summerfield <[email protected]> To: [email protected] Date: 11/03/2009 07:49 PM Subject: Re: TCPDUMP Sent by: Linux on 390 Port <[email protected]> Ron Wells wrote: > Not recv'ing / seeing packets being sent from Linux box..only see them > coming inbound?? > > Where can I start looking > Going through VSWITCH where OSA-Gig card is set > z/VM5.4 > SLES 10 SP2 > Linux agfzxt02 2.6.16.60-0.42.4-default #1 SMP Fri Aug 14 14:33:26 UTC > 2009 s390x s390x s390x GNU/Linux > > > tcpdump command: > tcpdump -p -i eth0 -s 0 -vv -w /root/appwork01.lcap "src port not 22 or > dst port not 22" When people start combining AND and NOT I have to think, and I don't like thinking. But I wonder whether you mean and rather than or. I'd use port not 22 Something like this: tcpdump -i eth0 -A -s9999 host terry and not port 22 which doesn't trace ssh activity. -- Cheers John -- spambait [email protected] [email protected] -- Advice http://webfoot.com/advice/email.top.php http://www.catb.org/~esr/faqs/smart-questions.html http://support.microsoft.com/kb/555375 You cannot reply off-list:-) ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 ---------------------------------------------------------------------- Email Disclaimer This E-mail contains confidential information belonging to the sender, which may be legally privileged information. This information is intended only for the use of the individual or entity addressed above. If you are not the intended recipient, or an employee or agent responsible for delivering it to the intended recipient, you are hereby notified that any disclosure, copying, distribution, or the taking of any action in reliance on the contents of the E-mail or attached files is strictly prohibited. ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
