[tcpdump-workers] Fwd: Libpcap 0.9.8 ip6 protochain issue.

2011-08-18 Thread Ramkumar

Re: [tcpdump-workers] Where are incoming packets timestamped at

2011-08-18 Thread Guy Harris
On Aug 18, 2011, at 2:04 PM, Fabrizio Giordano wrote: > Disabling net_timestamp() in net/core/dev.c was one of the first things I > tried, among with disabling other "get_timestamp"-like functions. But > apparently that's not where packes get timestamped. It is, but it's not the *only* place w

Re: [tcpdump-workers] Where are incoming packets timestamped at

2011-08-18 Thread Fabrizio Giordano
Disabling net_timestamp() in net/core/dev.c was one of the first things I tried, among with disabling other "get_timestamp"-like functions. But apparently that's not where packes get timestamped. Nuno's suggestion turned out to be what I was looking for. Packets are actually timestamped in th

[tcpdump-workers] Libpcap 0.9.8 ip6 protochain issue.

2011-08-18 Thread ramkumar p
Hi, I have tried to filter tcp packets in ipv6 with header chain and I couldn't succeed. I could only filter tcp packets following ipv6 header.I am attaching the pcap for reference. I have used the command: tcpdump -i eth0 -vv 'ip6 protochain 6' Thanks, ./Ram - This is the tcpdump-workers list