[96507] in RedHat Linux List
Re: Filtering by Ethernet HW address?
daemon@ATHENA.MIT.EDU (L. Marcel BARRERO M.)
Tue Oct 27 15:26:19 1998
Date: Tue, 27 Oct 1998 16:21:52 -0400 (BOT)
From: "L. Marcel BARRERO M." <barrero@dns.ilaco.gov.bo>
To: redhat-list@redhat.com
In-Reply-To: <3634DF26.75E26202@flwireless.net>
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com
Hello,
On Mon, 26 Oct 1998, Thomas Gaume wrote:
> I do alot of monitoring on our network, you may want to take a look at
> tcpdump, it should be on your linux box in the /sbin directory. Try
> something like "tcpdump | grep xxx" and you'll see if it is of any use.
>
yes, tcpdump is a very nice tool, but you can filter the traffic you
want to see, by passing some parameters to tcpdump. For the exact grammar
and syntax of those params, do man tcpdump.
But it can be:
% tcpdump -i eth0 ip host 192.168.10.10
% tcpdump -i eth0 ether host 00:C0:DF:00:35:3D
If you do just a grep, tcpdump must capture all the ethernet segments
and later another user process (the grep one) extracts the information
apparently you need.
Using the tcpdump parameter filters, is more optimum...
Marcel
--
PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
http://www.redhat.com http://archive.redhat.com
To unsubscribe: mail redhat-list-request@redhat.com with
"unsubscribe" as the Subject.
