org
Subject: Re: [tcpdump-workers] Loosing half the conversion when any BFP
is used
On Dec 19, 2007, at 11:09 AM, Bill Richardson wrote:
> Looking at the one system that works I see it is related to Vlan
> tagging:
Is the "test.pcap" file the same file in all three examples?
If
On Dec 19, 2007, at 11:09 AM, Bill Richardson wrote:
Looking at the one system that works I see it is related to Vlan
tagging:
Is the "test.pcap" file the same file in all three examples?
If so, does the "From ..." at the end of the command indicate the
machine on which you're running tcpd
t tcpdump to show me the full capture while using BPFs like
in the very first example?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Bill
Richardson
Sent: Wednesday, December 19, 2007 11:07 AM
To: tcpdump-workers@lists.tcpdump.org
Subject: [tcpdump-workers]
This may not be the right list to ask but thought I would give this a
try. I have looked and looked and have not seen anyone with this
problem.
In the past I have been able to take large inclusive tcpdump files and
read them back in with the -r option using tcpdump and BFP them to a
host or port
