RE: tcpdump how to? (darwin newbie)
RE: tcpdump how to? (darwin newbie)
- Subject: RE: tcpdump how to? (darwin newbie)
- From: "Wade Williams" <email@hidden>
- Date: Wed, 6 Mar 2002 16:44:49 -0600
>
Simply typing in 'tcpdump -e' responds with 'no suitable device found',
>
I recall that tcpflow needed -i en0 to see a device, maybe tcpdump is
similar.
I don't remember whether tcpdump -e will work, but I know tcpdump -i en0
will.
However, in all cases, you must be root.
W>hen I looked at the man page for tcpdump, I thought it was saying
>
that it only shows packet headers, not entire packets, hence the need
>
for tcpflow. But maybe I was mistaken. (I'm pretty much a Darwin
>
newbie too.)
You were not mistaken. TCPDump shows only headers. You need tcpflow if you
wish to see packet data.
Wade
_______________________________________________
macnetworkprog mailing list | email@hidden
Help/Unsubscribe/Archives:
http://www.lists.apple.com/mailman/listinfo/macnetworkprog
Do not post admin requests to the list. They will be ignored.