Package: tcpdump Version: 4.1.1-1 Severity: important
"tcpdump -i bond0 ip" and "tcpdump -i bond0 not vlan" captures non-ip (vlan) packets... ------------------------------------ # tcpdump -i bond0 -c 10000 -w test-dump-ip ip tcpdump: listening on bond0, link-type EN10MB (Ethernet), capture size 65535 bytes 10000 packets captured 19124 packets received by filter 9052 packets dropped by kernel # tcpdump -r test-dump-ip -c 10000 -w test-dump-ip-all reading from file test-dump-ip, link-type EN10MB (Ethernet) // test-dump-ip & test-dump-ip-all -- have same size # tcpdump -r test-dump-ip -c 10000 -w test-dump-ip-ip ip reading from file test-dump-ip, link-type EN10MB (Ethernet) // test-dump-ip-ip smaler than test-dump-ip # tcpdump -r test-dump-ip -c 10000 -w test-dump-ip-vlan vlan reading from file test-dump-ip, link-type EN10MB (Ethernet) // test-dump-ip-vlan size + test-dump-ip-ip size == test-dump-ip size # ls -l test-dump-ip* -rw-r--r-- 1 root root 6601360 Jan 12 01:22 test-dump-ip -rw-r--r-- 1 root root 6601360 Jan 12 01:23 test-dump-ip-all -rw-r--r-- 1 root root 6067645 Jan 12 01:23 test-dump-ip-ip -rw-r--r-- 1 root root 533739 Jan 12 01:23 test-dump-ip-vlan // $[6067645+533739-6601360] == 24 # ------------------------------------ # tcpdump -i bond0 -c 10000 -w test-dump-notvlan not vlan tcpdump: listening on bond0, link-type EN10MB (Ethernet), capture size 65535 bytes 10000 packets captured 13517 packets received by filter 3455 packets dropped by kernel # tcpdump -r test-dump-notvlan -c 10000 -w test-dump-notvlan-notvlan not vlan reading from file test-dump-notvlan, link-type EN10MB (Ethernet) // test-dump-notvlan-notvlan smaler than test-dump-notvlan # tcpdump -r test-dump-notvlan -c 10000 -w test-dump-notvlan-vlan vlan reading from file test-dump-notvlan, link-type EN10MB (Ethernet) # ls -l test-dump-notvlan* -rw-r--r-- 1 root root 5419363 Jan 12 01:36 test-dump-notvlan -rw-r--r-- 1 root root 4779882 Jan 12 01:36 test-dump-notvlan-notvlan -rw-r--r-- 1 root root 639505 Jan 12 01:37 test-dump-notvlan-vlan // $[4779882+639505-5419363] == 24 # -- System Information: Debian Release: 6.0.3 APT prefers stable APT policy: (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 2.6.32-5-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages tcpdump depends on: ii libc6 2.11.2-10 Embedded GNU C Library: Shared lib ii libpcap0.8 1.1.1-2+squeeze1 system interface for user-level pa ii libssl0.9.8 0.9.8o-4squeeze4 SSL shared libraries tcpdump recommends no packages. tcpdump suggests no packages. -- debconf-show failed -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
