Hi Hanees,

Thanks for ur reply...
I referred print-arp.c for arp output format..no where i found (Broadcast)
is using...but it is appearing on the output...[refer to my first mail]
If there is no such information like the output should be printed like
this..
then how can we know whether it is a correct output or not..

And one more thing is , Is the tcpdump tested on any platform(OS)? so that i
can refer
the output on that platform..

My tcpdump version: 3.9.4


On 3/6/06, Hannes Gredler <[EMAIL PROTECTED]> wrote:
>
>
>
> Latha G wrote:
> > Hi all,
> >
> > I have one question about the output format of tcpdump.
> > How can we know whether the output from the tcpdump is in the correct
> > format?
> > Any file is there to know about the format of the output?
>
> there is no central file - very printer controls its own output formay
>
> > The printing of packets on the standard output is tcpdump's
> implementation
> > dependent, right?
>
> correct - whenever we add/improve a printer the output format is likely
> to change ;-)
>
> > Is the the output format will be changed from version to version???
>
> not regularly
>
> > Then, where can I find the format of the output?
>
> ls -l print-*.c
>
> > like for IP packets the output should be like that.....
>
> i am afraid there is no such document ...
>
> > in that way , i want...
> >
> > I got the doubt because......
> > arp packet once i got is,
> >     13:39:20.680816 arp who-has 172.16.0.136 tell mech_23_28.ac.in
> > and some other time i got is,
> >      13:39:20.680816 arp who-has 172.16.0.136 (Broadcast) tell
> > mech_23_28.ac.in
> > Any small help be appreciated..
> -
> This is the tcpdump-workers list.
> Visit https://lists.sandelman.ca/ to unsubscribe.
>



--
Thaks & Regards,
Latha.
-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.

Reply via email to