Jim Mellander wrote:
Jim> Hi:
Jim> On tcpdump 4.1.1, printing from a saved standard format pcap
Jim> file:
Jim> $ tcpdump -nn -tt -s 0 -r 128.XX.XX.197.icmp.trace |head -3
Jim> reading from file 128.XX.XX.197.icmp.trace, link-type EN10MB
Jim> (Ethernet) 18:45:55.9661231
This is running on Scientific Linux 6.2 (a clone of Redhat Enterprise)
- its not the distributed rpm version that we are using, but compiled
4.1.1 - I wasn't the one who compiled the binary, so I'm not sure what
options, etc. were selected, but can try compiling current and see if
it can be reprodu