[tcpdump-workers] Dropping Packets With Newer Intel NIC?

2013-02-08 Thread Chad W. Davis
Hello, We are migrating a packet sniffing project from a Dell PowerEdge R410 (Dual Broadcom 1Gb Integrated NICs) to a Dell PowerEdge R620 (Quad Intel 1521 i350-series 1Gb Daughterboard NICs). We are running the exact same code on the same OS (Debian Squeeze) on both systems. We're experiencin

Re: [tcpdump-workers] verbose decoding without assigned port number

2013-02-08 Thread Michael Richardson
> "Denis" == Denis Ovsienko writes: >> Currently the -T option is the only resort at the IP layer and >> UDP layer. It could apply to TCP too, perhaps. Denis> It looks like -T applies. I've got a working code and am Denis> producing a sample capture. The ZeroMQ decoding func

Re: [tcpdump-workers] verbose decoding without assigned port number

2013-02-08 Thread Denis Ovsienko
> Denis> There are network protocols that have an assigned port > Denis> number, and there are other that don't or are commonly used > Denis> on non-assigned ports, such as HTTP on port 8080. Looking at > Denis> function tcp_print() in file print-tcp.c, it is clear how the > Den