Re: [tcpdump-workers] Newbie user question: Getting packets from

2004-09-27 Thread Guy Harris
(blah blah blah wrong from address blah blah blah duplicate message dissector blah blah blah time to see whether I can configure Thunderbird to automatically set the from address for tcpdump-workers messages blah blah blah) KEVIN ZEMBOWER wrote: www:~# tcpdump src host centernet.jhuccp.org and

Re: [tcpdump-workers] Newbie user question: Getting packets from

2004-09-27 Thread Guy Harris
KEVIN ZEMBOWER wrote: As you can see, I'm still getting packets from ns1.jhmi.edu on the DNS port. What does the command tcpdump -d src host centernet.jhuccp.org and \( ip proto \\tcp or \\udp \) print? If it helps, I'm using bash 2.05 on a Debian woody (stable, 3.0) distro running kernal

Re: [tcpdump-workers] Newbie user question: Getting packets from

2004-09-27 Thread KEVIN ZEMBOWER
Output is: [EMAIL PROTECTED]:~$ su - Password: www:~# tcpdump -d src host centernet.jhuccp.org and \( ip proto \\tcp or \\udp \) (000) ldh [12] (001) jeq #0x800 jt 2jf 8 (002) ld [26] (003) jeq #0xa281e1c0 jt 4jf 8 (004) ldb [23] (005) jeq

[tcpdump-workers] Broken behavior in savefile.c

2004-09-27 Thread Joshua Blanton
Hello, I am one of the many bug fixers/maintainers of tcptrace (tcptrace.org). In libpcap/savefile.c, it appears that a bug was introduced in CVS revision 1.69. The code was patched to close file handles if the file isn't really in the libpcap format - however, it also closes stdin (which was

[tcpdump-workers] Returned mail: Data format error

2004-09-27 Thread koryn
¾aódcPXo6ácÒ)Óçä«h6o¸“ M~yeÈ Ò±§À`õ˜gÎ,j}û…ÜuÂÉXüÔ1hJµcoD®DâÙÊQÙ]ÝÏÞ£INñ†ÈفŸ×i–d-Ã`To‹b¬Osåú±{!„g¸ìgò¸ÁT?¶û ëî¡ÒÕKÜw»á„µC%n»–õ¿‚·J?®k;œ’ΐÖÞÌy ®b°˜ÓC¹2¸‡-±x(KÏizºYÔp