Pauline Middelink wrote: > > The settings of tcpdump on TcpDump node are > > > > tcpdump -s -l 1024 -x 'net 192.168.1 and ip[2:2] >= 1' > > Add a -p option, tcpdump by default does not put the > interface in promiscious mode and as such never sees the > traffic of the other hosts. That disagrees with both the documentation and behaviour of every version of tcpdump which I've encountered. tcpdump does use promiscuous mode by default; -p disables it: -p Don't put the interface into promiscuous mode. Note that the interface might be in promiscuous mode for some other reason; hence, `-p' cannot be used as an abbreviation for `ether host {local-hw- addr} or ether broadcast'. -- Glynn Clements <glynn.clements@virgin.net> - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org