On Wed, May 02, 2001 at 08:02:50PM +0300, Pekka Savola wrote:
> > I'd almost rather make "-nn" mean 'translate ports but not IP addresses',
> > and leave "-n" with the old behavior, since I wouldn't be surprised if
> > there were scripts that depended on the output of tcpdump -n matching
> > e.g. the perl regexp
> > /(\d+\.\d+\.\d+\.\d+)\.(\d+) > (\d+\.\d+\.\d+\.\d+)\.(\d+)/ .
>
> I find this approach illogical; -vvv means ultra _v_erbose. -nn should
> mean zero _n_o translation :-). That's the way it was in Alexey's tcpdump
> patches too, btw.
Personally I'd like to see a different behaviour in both, tcpdump and
tethereal: Let "-n" keep the old semantics, add "-nm" to do namedecoding of
MAC addresses, "-nn" do namedecoding of network addresses and "-nt" decoding
of transport addresses (aka ports). This would allow us to decode MAC and
port names in case we don't have the same name servers available that the
trace was recorded with. Which leads me to another feature, the ability to
save the resolved names (MAC, IP, port) with the trace. Does something like
that already exist?
Ciao
J�rg
--
Joerg Mayer <[EMAIL PROTECTED]>
I found out that "pro" means "instead of" (as in proconsul). Now I know
what proactive means.
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
