Re: [tcpdump-workers] Warning on enabling ip6 protochain 6

2011-08-04 Thread Guy Harris
On Aug 4, 2011, at 10:46 PM, ramkumar.parana...@gmail.com wrote: > Is there any way other than ip6 protochain 6 to filter ipv6 traffic with > extension headers and tcp ? Other than constructing your own BPF program (which would probably look like what "ip6 protochain 6" generated, complete wit

Re: [tcpdump-workers] Warning on enabling ip6 protochain 6

2011-08-04 Thread ramkumar . paranandi
Is there any way other than ip6 protochain 6 to filter ipv6 traffic with extension headers and tcp ? Sent from my iPad On Aug 5, 2011, at 1:04 AM, Guy Harris wrote: > > On Aug 4, 2011, at 9:42 PM, ramkumar p wrote: > >> If we specify "ip6 tcp port 25 " does this also filter the traffic with

Re: [tcpdump-workers] Warning on enabling ip6 protochain 6

2011-08-04 Thread Guy Harris
On Aug 4, 2011, at 9:42 PM, ramkumar p wrote: > If we specify "ip6 tcp port 25 " does this also filter the traffic with IPv6 > and extension headers like Routing, Fragment,hop and destination options > etc... and tcp port 25 No. > or it filters only ipv6 traffic without extension > headers and

Re: [tcpdump-workers] Warning on enabling ip6 protochain 6

2011-08-04 Thread ramkumar p
Hi, Thanks good info. If we specify "ip6 tcp port 25 " does this also filter the traffic with IPv6 and extension headers like Routing, Fragment,hop and destination options etc... and tcp port 25 or it filters only ipv6 traffic without extension headers and tcp port 25 Thanks, ./Ram On Thu, A

Re: [tcpdump-workers] Warning on enabling ip6 protochain 6

2011-08-04 Thread Guy Harris
On Aug 2, 2011, at 4:42 PM, ramkumar p wrote: > I am receiving warning that kernel filter failed: invalid argument when I > enable ip6 protochain 6 to filter tcp traffic. That warning means that the filter code generated for "ip6 protochain 6" was rejected by the Linux kernel socket filter

Re: [tcpdump-workers] the bug of use for 'more' for the file created with tcpdump

2011-08-04 Thread Guy Harris
On Aug 4, 2011, at 2:11 AM, . 嫒〆j々 wrote: >First I use tcpdump to wirite the information to a file . like > this,'tcpdump host 192.168.1.198 -w a.txt'. "a.txt" is a bad name for the file, because it's *not* a text file! > Arter about three seconds,I press the 'CTRL+C". >Second, I use t

[tcpdump-workers] the bug of use for 'more' for the file created with tcpdump

2011-08-04 Thread . 嫒〆j々
Hello : First I use tcpdump to wirite the information to a file . like this,'tcpdump host 192.168.1.198 -w a.txt'. Arter about three seconds,I press the 'CTRL+C". Second, I use the "more" to view the information about a.txt . But After I press the 'CTRL+C". The word int command windo