[tcpdump-workers] Fwd: Libpcap 0.9.8 ip6 protochain issue.

2011-08-18 Thread Ramkumar

[tcpdump-workers] Libpcap 0.9.8 ip6 protochain issue.

2011-08-18 Thread ramkumar p
Hi, I have tried to filter tcp packets in ipv6 with header chain and I couldn't succeed. I could only filter tcp packets following ipv6 header.I am attaching the pcap for reference. I have used the command: tcpdump -i eth0 -vv 'ip6 protochain 6' Thanks, ./Ram - This is the tcpdump-workers list

Re: [tcpdump-workers] Ip6 protochain

2011-08-12 Thread ramkumar . paranandi
Hi, Any info regarding the below request? Thanks, ./ram On Aug 11, 2011, at 6:31 PM, ramkumar.parana...@gmail.com wrote: > >> Ip6 protochain 6 and tcp port 25 and net 2001:0db8:0:1::/64 would filter >> packets ipv6 with extension hdrs and tcp port 25 and which belongs to >> network? > > C

[tcpdump-workers] Ip6 protochain

2011-08-11 Thread ramkumar . paranandi
> Ip6 protochain 6 and tcp port 25 and net 2001:0db8:0:1::/64 would filter > packets ipv6 with extension hdrs and tcp port 25 and which belongs to > network? Can we use tcp port and networks along with ip6 protochain? If available, please share me the pcaps with ipv6 header chain and tcp. T

Re: [tcpdump-workers] Warning on enabling ip6 protochain 6

2011-08-09 Thread ramkumar . paranandi
"Ip6 protochain 6 and tcp port 25 and net 10.1.1.0 " would filter packets ipv6 with extension hdrs and tcp port 25 and which belongs to network 10.1.1.0? Can we use other filters along with ip6 protochain? Thanks, ./ram On Aug 9, 2011, at 12:39 AM, Guy Harris wrote: > > On Aug 8, 2011, at 1

Re: [tcpdump-workers] Warning on enabling ip6 protochain 6

2011-08-08 Thread ramkumar . paranandi
How much percentage of traffic in real world scenarios would these kind (ipv6 chain)of packets consist? Thanks, ./ram On Aug 8, 2011, at 7:44 PM, Guy Harris wrote: > > On Aug 8, 2011, at 6:22 PM, ramkumar.parana...@gmail.com wrote: > >> Can we expect any packet drop by the kernel due to th

Re: [tcpdump-workers] Warning on enabling ip6 protochain 6

2011-08-08 Thread ramkumar . paranandi
Hi, Can we expect any packet drop by the kernel due to this warning? If so, what kind of packets would kernel drop? Thanks, ./ram On Aug 8, 2011, at 4:24 AM, Darren Reed wrote: > On 6/08/11 11:22 PM, Guy Harris wrote: >> ... >> For "ip4 protochain", the only protocol type that needs special

Re: [tcpdump-workers] Warning on enabling ip6 protochain 6

2011-08-04 Thread ramkumar . paranandi
Is there any way other than ip6 protochain 6 to filter ipv6 traffic with extension headers and tcp ? Sent from my iPad On Aug 5, 2011, at 1:04 AM, Guy Harris wrote: > > On Aug 4, 2011, at 9:42 PM, ramkumar p wrote: > >> If we specify "ip6 tcp port 25 " does this als

Re: [tcpdump-workers] Warning on enabling ip6 protochain 6

2011-08-04 Thread ramkumar p
m On Thu, Aug 4, 2011 at 7:46 PM, Guy Harris wrote: > > On Aug 2, 2011, at 4:42 PM, ramkumar p wrote: > > > I am receiving warning that kernel filter failed: invalid argument when > I enable ip6 protochain 6 to filter tcp traffic. > > That warning means that the filter co

[tcpdump-workers] Warning on enabling ip6 protochain 6

2011-08-02 Thread ramkumar p
Hi, I am receiving warning that kernel filter failed: invalid argument when I enable ip6 protochain 6 to filter tcp traffic. Thanks, Ram- This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.

[tcpdump-workers] Libpcap: BPF filter for ipv6 tunnel

2011-07-31 Thread ramkumar . paranandi
Hi, I have smtp traffic over ipv6 tunneled in ipv4. .ip->ipv6->tcp->smtp How can we set bpf to filter smtp in ipv6 in ipv4 tunnel traffic? I have tried with ip protochain 0x06 it is not working.(libpcap.0.9.8). Thanks, ./ram Sent from my iPad- This is the tcpdump-workers list. Visit https://