On Tue, May 25, 2010 at 7:26 PM, Daniel Bareiro <[email protected]> wrote: > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Hi all! > > I'm trying to use tcpdump in OpenBSD 4.6 with a syntax similar to the > following: > > # tcpdump -vvv udp and port 5060 or portrange 10000-2000 -s0 \ > -i eht0 -w eavesdropping_ulaw.dump > > In this case, the interface is em0, but I see that with this tcpdump > version there is no parameter 'portrange'. I'm using a version compiled > with the source code obtained by anoncvs, because I wanted to install > with pkg_add but was not available. I tried as follows, but without > success: >
No pkg_add needed, its part of the base install: http://www.openbsd.org/cgi-bin/cvsweb/src/usr.sbin/tcpdump/ > > # tcpdump -vv udp and port 5060 or "port >= 10000 and port <= 20000" -s0 \ > > -i em0 -w eavesdropping_ulaw.dump > tcpdump: syntax error > > > Thanks in advance for your reply. > > Regards, > Daniel > iEYEARECAAYFAkv7+mYACgkQZpa/GxTmHTdQ2wCeLsz+Zv0ad6I+IMr7S+NgBBZU > oAAAn2C2eLJyhqS0KHN1rHZiHK2kbWHy > =Pbeq > -----END PGP SIGNATURE----- > Also, does -s0 work on OpenBSD? I thought it was a GNU/Linux and FreeBSDish hack. On OpenBSD, shouldnt it manually be set to whatever your MTU is?

