Re: [tcpdump-workers] Sniffing inbound ethernet frames only

2006-10-26 Thread Jost-DVSB
Jefferson Ogata wrote: > > Have you tried > > left window: not ether src mac:addr:of:eth0 > right window: not ether src mac:addr:of:eth1 Dear Jefferson, works fine, good to know that there are experts. Thank you very much! jojo - This is the tcpdump-workers list. Visit https://cod.sandelman.c

Re: [tcpdump-workers] Sniffing inbound ethernet frames only

2006-10-24 Thread Hannes Gredler
> Hello Hannes, > > on SuSE 10.1 (Kernel 2.6.16.13-4) I get the > following message: > > # tcpdump -i eth1 inbound ether > tcpdump: inbound/outbound not supported on linktype 1 > # tcpdump --version > tcpdump version 3.9.4 > libpcap version 0.9.4 > > Best regards > jojo ok makese sense now - so

Re: [tcpdump-workers] Sniffing inbound ethernet frames only

2006-10-23 Thread Jost-DVSB
Hannes Gredler wrote: > > [EMAIL PROTECTED] wrote: >> Dear tcpdump experts, >> >> I have a Linux box with two Fast Ethernet interfaces. >> In two separate windows on the desktop I want to see >> all inbound ethernet frames (from the wire), but not >> the ethernet frames coming down the local netwo

Re: [tcpdump-workers] Sniffing inbound ethernet frames only

2006-10-23 Thread Hannes Gredler
[EMAIL PROTECTED] wrote: > Dear tcpdump experts, > > I have a Linux box with two Fast Ethernet interfaces. > In two separate windows on the desktop I want to see > all inbound ethernet frames (from the wire), but not > the ethernet frames coming down the local network stack. > In the left window

Re: [tcpdump-workers] Sniffing inbound ethernet frames only

2006-10-23 Thread Jefferson Ogata
On 2006-10-23 15:13, [EMAIL PROTECTED] wrote: > Jefferson Ogata wrote: >> Have you tried >> >> left window: not ether src mac:addr:of:eth0 >> right window: not ether src mac:addr:of:eth1 > > Hello Jefferson, > > thanks for the quick response. > Is there a per process filtering or is there > one k

Re: [tcpdump-workers] Sniffing inbound ethernet frames only

2006-10-23 Thread Jost-DVSB
Jefferson Ogata wrote: > Have you tried > > left window: not ether src mac:addr:of:eth0 > right window: not ether src mac:addr:of:eth1 > Hello Jefferson, thanks for the quick response. Is there a per process filtering or is there one kernel filter for all processes? In the latter case the filte

Re: [tcpdump-workers] Sniffing inbound ethernet frames only

2006-10-21 Thread Jefferson Ogata
On 2006-10-20 16:24, [EMAIL PROTECTED] wrote: > I have a Linux box with two Fast Ethernet interfaces. > In two separate windows on the desktop I want to see > all inbound ethernet frames (from the wire), but not > the ethernet frames coming down the local network stack. > In the left window tcpdump

[tcpdump-workers] Sniffing inbound ethernet frames only

2006-10-21 Thread Jost-DVSB
Dear tcpdump experts, I have a Linux box with two Fast Ethernet interfaces. In two separate windows on the desktop I want to see all inbound ethernet frames (from the wire), but not the ethernet frames coming down the local network stack. In the left window tcpdump should run to catch all incoming