On Sep 27, 2004, at 12:37 PM, KEVIN ZEMBOWER wrote:
Output is:
[EMAIL PROTECTED]:~$ su -
Password:
www:~# tcpdump -d src host centernet.jhuccp.org and \( ip proto \\tcp
or \\udp \)
(000) ldh [12]
(001) jeq #0x800 jt 2jf 8
(002) ld [26]
(003) jeq #0xa281e1c0
Output is:
[EMAIL PROTECTED]:~$ su -
Password:
www:~# tcpdump -d src host centernet.jhuccp.org and \( ip proto \\tcp or \\udp \)
(000) ldh [12]
(001) jeq #0x800 jt 2jf 8
(002) ld [26]
(003) jeq #0xa281e1c0 jt 4jf 8
(004) ldb [23]
(005) jeq #0x
KEVIN ZEMBOWER wrote:
As you can see, I'm still getting packets from ns1.jhmi.edu on the DNS port.
What does the command
tcpdump -d src host centernet.jhuccp.org and \( ip proto \\tcp or \\udp \)
print?
If it helps, I'm using bash 2.05 on a Debian woody (stable, 3.0) distro
running kernal 2
Guy, thank you for your persistence in trying to get an answer to me.
Unfortunately, this is what I got:
www:~# tcpdump src host centernet.jhuccp.org and \( ip proto \\tcp or \\udp \)
tcpdump: listening on eth0
15:11:03.982156 virtual.jhuccp.org.59210 > ns1.jhmi.edu.domain: 59291+ ?
centerne
(blah blah blah wrong from address blah blah blah duplicate message
dissector blah blah blah time to see whether I can configure Thunderbird
to automatically set the from address for tcpdump-workers messages blah
blah blah)
KEVIN ZEMBOWER wrote:
www:~# tcpdump src host centernet.jhuccp.org and