Re: [tcpdump-workers] NBT Unknown Packet Type

[David McGaughey]

Hello!  I was just trying to put an e-mail together for this issue.  I'm seeing something a bit different.  I've got a linux 7.0 box with yesterday's copy of libpcap and tcpdump compiled and installed on it.  This machine is also a SAMBA server to a windows NT server.  The server has a share mapped from the linux box.  The NT server is also a web server with IIS/4.0 installed.  ALL of the traffic from the NT box to anywhere on the Internet is placed into NBT/SMB packets when monitored by TCPDUMP.  If I unmount the share this stops, but the only packets that will be captured by TCPDUMP will be NBT/SMB packets.  I don't see any of the web packets.   Could this be a bug?   David McGaughey City of Lubbock, Texas   ps   TCPDUMP and LIBPCAP are really great products!  Just saw this one strange thing.  I tried this on two different linux boxes and two different NT servers with the same results.