It is connected to a hub. I have a Sniffer on the same ring, using the same card and it works well. # ./trconfig Madge Diagnostics v1.1 Copyright (c) 1999 Madge Networks Ltd Device: tr0 Driver version: 2.31.0 Driver ID: MadgeLinux 2.31 Card: Madge Smart 16/4 PCI Ringnode Mk2 PCI Info: Bus 0 Device 11 Function 0 IO Base: 5000 IRQ: 11 Max Frame Size: 12000 RX Slots: 4 TX Slots: 4 Burnt in Address: 0000F6B7F2CF LAA: 0000F6B7F2CF Upstream Neighbour: 0000F6CACBC1 Current group: 000000000000 Open Ring Speed: 16 Mbits/s Connection Type: Classic Promiscuous level: All LLC and MAC frames Last Beacon Type: 0x0 Local Ring Number: 0x0 State: Device open (Adapter open) Ring Status: Normal Counters Bytes Frames Dropped Errors RX 50009 590 0 0 TX 1552 3 0 0 Errors Line:0 Internal:0 Burst: 0 ARI/FCI:0 Abort Delim:0 Lost Frame: 0 Congestion:0 Frame Copy:0 Frequency: 0 Token:0 DMA Bus:0 DMA Parity: 0 # /sbin/ifconfig tr0 tr0 Link encap:16/4 Mbps Token Ring HWaddr 00:00:F6:B7:F2:CF inet addr:32.73.75.226 Bcast:32.73.75.255 Mask:255.255.252.0 UP BROADCAST RUNNING PROMISC MTU:9000 Metric:1 RX packets:1223 errors:0 dropped:0 overruns:0 frame:0 TX packets:3 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 Interrupt:11 Base address:0x5000 > Is the card connected to a hub or a switch? > > I was wondering if this might be the proper forum to get assistance with > > figuring out why tcpdump is not working as expected on my system. I get > > the card in promiscuous mode but tcpdump only sees/reports broadcast > > packets or packets destined for the system itself. > > RH Linux - 2.2.14 kernel (tried 2.2.18 also but can't get mtok to > > compile on that platform yet) > > libpcap-0.7.1 (tried 0.6.2 first, same results) > > tcpdump-3.7.1 (tried 3.6.2 first, same results) > > Madge TR card BM Mk2, mtok.o v2.31 - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html