hanks
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Guy Harris
Sent: Thursday, December 20, 2007 2:02 PM
To: tcpdump-workers@lists.tcpdump.org
Subject: Re: [tcpdump-workers] Loosing half the conversion when any BFP
is
Bill Richardson wrote:
> From BigIP
>
&
] Loosing half the conversion when any BFP
is
Bill Richardson wrote:
> With that I mind I wonder what F5 did to libpcap to get tcpdump to
> work? They must have made some changes?
What happens if you do
tcpdump -r test.pcap -nn host 172.21.89.75 -d
on the BigIP?
-
This is the t
org
Subject: Re: [tcpdump-workers] Loosing half the conversion when any BFP
is used
On Dec 19, 2007, at 11:09 AM, Bill Richardson wrote:
> Looking at the one system that works I see it is related to Vlan
> tagging:
Is the "test.pcap" file the same file in all three examples?
If
t tcpdump to show me the full capture while using BPFs like
in the very first example?
-Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Bill
Richardson
Sent: Wednesday, December 19, 2007 11:07 AM
To: tcpdump-workers@lists.tcpdump.org
Subject: [tcpdump-workers]
This may not be the right list to ask but thought I would give this a
try. I have looked and looked and have not seen anyone with this
problem.
In the past I have been able to take large inclusive tcpdump files and
read them back in with the -r option using tcpdump and BFP them to a
host or port
