Marc Haber <[EMAIL PROTECTED]> writes: > $ sudo tcpdump -i eth2 -qn icmp or arp > tcpdump: listening on eth2 > 13:41:10.883402 arp who-has 192.168.129.9 tell 192.168.129.1 > 13:41:10.884116 arp reply 192.168.129.9 is-at 0:f:20:17:3c:c0 > 13:41:10.884124 192.168.129.1 > 192.168.129.9: icmp: echo request (DF) > 13:41:10.884669 192.168.129.9 > 192.168.129.1: icmp: echo reply (DF) > 13:41:16.496210 arp who-has 192.168.131.9 tell 192.168.131.1 > 13:41:16.497702 192.168.131.1 > 192.168.131.9: icmp: echo request (DF)
> The ping on the untagged VLAN is dumped OK. One sees all four frames: > ARP request/reply, ICMP echo request/reply. > The last two lines are all what is dumped for the ping on the VLAN > interface. One notices two problems: > (1) only outgoing frames show > (2) the outgoing frames don't show as VLAN tagged frames. It is > impossible to distinguish the tagged frame from an untagges frame. Could you try with the filter '(icmp or arp) or vlan'? Thanks, -- ,''`. : :' : Romain Francoise <[EMAIL PROTECTED]> `. `' http://people.debian.org/~rfrancoise/ `- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
