On Thu, 14 Jun 2001 around 13:20:21 +0100, Glynn Clements wrote: > > > The settings of tcpdump on TcpDump node are > > > > > > tcpdump -s -l 1024 -x 'net 192.168.1 and ip[2:2] >= 1' > > > > Add a -p option, tcpdump by default does not put the > > interface in promiscious mode and as such never sees the > > traffic of the other hosts. > > That disagrees with both the documentation and behaviour of every > version of tcpdump which I've encountered. tcpdump does use > promiscuous mode by default; -p disables it: > > -p Don't put the interface into promiscuous mode. > Note that the interface might be in promiscuous > mode for some other reason; hence, `-p' cannot be > used as an abbreviation for `ether host {local-hw- > addr} or ether broadcast'. Newer versions don't: -p Do put the interface into promiscuous mode. Note that legacy mode was to use promiscuous mode by default. Also note that the interface might be in promiscuous mode for some other reason. Met vriendelijke groet, Pauline Middelink -- GPG Key fingerprint = 2D5B 87A7 DDA6 0378 5DEA BD3B 9A50 B416 E2D0 C3C2 For more details look at my website http://www.polyware.nl/~middelink - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org