RE: tcpdump how to? (darwin ne Wade Williams <email@hidden> wbie)
RE: tcpdump how to? (darwin ne Wade Williams <email@hidden> wbie)
- Subject: RE: tcpdump how to? (darwin ne Wade Williams <email@hidden> wbie)
- From: Joe Kelly <email@hidden>
- Date: Wed, 6 Mar 2002 18:37:57 -0800
Thanks to all who replied. I got what I needed by
sudo tcpdump -i en0 -s 512 -X
joe
>
-----Original Message-----
>
From: Josh Graessley [mailto:email@hidden]
>
Sent: Wednesday, March 06, 2002 3:28 PM
>
To: email@hidden
>
Subject: Re: tcpdump how to? (darwin ne Wade Williams
>
<email@hidden>wbie)
>
>
>
On 3/6/02 2:44 PM, "Wade Williams" <email@hidden> wrote:
>
>
> W>hen I looked at the man page for tcpdump, I thought it was saying
>
>> that it only shows packet headers, not entire packets,
>
hence the need
>
>> for tcpflow. But maybe I was mistaken. (I'm pretty much a Darwin
>
>> newbie too.)
>
>
>
> You were not mistaken. TCPDump shows only headers. You
>
need tcpflow if you
>
> wish to see packet data.
>
>
Actually, that's not entirely true. You can use the -s option
>
to specify the
>
maximum length of packet data to display and -X to display the packets
>
contents.
>
>
example:
>
sudo tcpdump -s 1500 -nXi en0
>
>
The -n as noted before keeps tcpdump from wasting it's time and yours
>
looking up the names of addresses.
>
>
-josh
>
_______________________________________________
>
macnetworkprog mailing list | email@hidden
>
Help/Unsubscribe/Archives:
>
http://www.lists.apple.com/mailman/listinfo/macnetworkprog
>
Do not post admin requests to the list. They will be ignored.
_______________________________________________
macnetworkprog mailing list | email@hidden
Help/Unsubscribe/Archives:
http://www.lists.apple.com/mailman/listinfo/macnetworkprog
Do not post admin requests to the list. They will be ignored.