[519] in linux-net channel archive
Re: tcpdump expressions?
daemon@ATHENA.MIT.EDU (Michael Callahan)
Fri Jun 16 11:07:58 1995
Date: Fri, 16 Jun 1995 14:13:10 +0100 (BST)
From: Michael Callahan <callahan@maths.ox.ac.uk>
To: Kayvan Sylvan <kayvan@Sylvan.COM>
cc: linux-net@vger.rutgers.edu
In-Reply-To: <m0sMNn3-00023MC@satyr.sylvan.com>
On Thu, 15 Jun 1995, Kayvan Sylvan wrote:
> Does anyone have tcpdump working with expressions?
"tcpdump 'host foobar'" works for me.
> Also, would tcpdump show forwarded IP packets (going through ppp0 but
> originated on ppp1, for instance)?
According to my reading of the source, these would be seen by tcpdump
twice: once when the packet arrived on ppp0, once when it was sent on
ppp1. See dev.c:dev_queue_xmit and net_bh.
Michael
