Hi Hanees, Thanks for ur reply... I referred print-arp.c for arp output format..no where i found (Broadcast) is using...but it is appearing on the output...[refer to my first mail] If there is no such information like the output should be printed like this.. then how can we know whether it is a correct output or not..
And one more thing is , Is the tcpdump tested on any platform(OS)? so that i can refer the output on that platform.. My tcpdump version: 3.9.4 On 3/6/06, Hannes Gredler <[EMAIL PROTECTED]> wrote: > > > > Latha G wrote: > > Hi all, > > > > I have one question about the output format of tcpdump. > > How can we know whether the output from the tcpdump is in the correct > > format? > > Any file is there to know about the format of the output? > > there is no central file - very printer controls its own output formay > > > The printing of packets on the standard output is tcpdump's > implementation > > dependent, right? > > correct - whenever we add/improve a printer the output format is likely > to change ;-) > > > Is the the output format will be changed from version to version??? > > not regularly > > > Then, where can I find the format of the output? > > ls -l print-*.c > > > like for IP packets the output should be like that..... > > i am afraid there is no such document ... > > > in that way , i want... > > > > I got the doubt because...... > > arp packet once i got is, > > 13:39:20.680816 arp who-has 172.16.0.136 tell mech_23_28.ac.in > > and some other time i got is, > > 13:39:20.680816 arp who-has 172.16.0.136 (Broadcast) tell > > mech_23_28.ac.in > > Any small help be appreciated.. > - > This is the tcpdump-workers list. > Visit https://lists.sandelman.ca/ to unsubscribe. > -- Thaks & Regards, Latha. - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.