Yes, ethereal doesn't work too. well, I think this is true, but must be something to sniff this "marks"
thanks, Lucas. 2008/9/25 Brian Schrock <[EMAIL PROTECTED]> > I was never under the impression that marking packets does anything to the > packet itself. It only makes modifications to the struct that represents the > packet in the kernel. Tcpdump only looks at the packet, therefore mark'ing a > packet does nothing to the packet that the network would ever see. Internal > only. > > > On Thu, Sep 25, 2008 at 1:57 PM, Lucas Mocellin <[EMAIL PROTECTED]>wrote: > >> Hi, >> >> I marked some packets with iptables (-j MARK), and I want to "see" this >> set. >> >> I tried to search google, but nothing related. tcpdump doesn't seems help >> with that. >> >> Have anyone any idea? >> >> Thanks, >> >> Lucas Mocellin. >> > >
