Hi,
1) tcpslice beta snapshots on www.tcpdump.org/beta/ appear to be about
zero-size..
2) I've changed the portnumbers patch (attached) as discussed months
ago, so that it would be less intrusive.. Perhaps this could be
considered as a 3.7.0 candidate.
--
Pekka Savola "Tell me of difficulties surmounted,
Netcore Oy not those you stumble over and fall"
Systems. Networks. Security. -- Robert Jordan: A Crown of Swords
--- tcpdump-3.7.0/addrtoname.c Tue Sep 18 00:57:50 2001
+++ tcpdump-3.7.0.new/addrtoname.c Fri Nov 9 10:38:55 2001
@@ -656,7 +656,7 @@
while (table->name)
table = table->nxt;
- if (nflag) {
+ if (nflag == 1) {
(void)snprintf(buf, sizeof(buf), "%d", port);
table->name = strdup(buf);
} else
@@ -845,7 +845,7 @@
f_localnet = localnet;
f_netmask = mask;
}
- if (nflag)
+ if (nflag == 1)
/*
* Simplest way to suppress names.
*/
--- tcpdump-3.7.0/tcpdump.1 Fri Nov 9 10:38:55 2001
+++ tcpdump-3.7.0.new/tcpdump.1 Fri Nov 9 10:43:40 2001
@@ -278,6 +278,10 @@
.B \-n
Don't convert addresses (i.e., host addresses, port numbers, etc.) to names.
.TP
+.B \-nn
+Don't convert host addresses to names, but do convert port numbers and such;
+this can be used when one wants to avoid DNS lookups.
+.TP
.B \-N
Don't print domain name qualification of host names.
E.g.,
