tcpdump mailing list archives

Re: tcpdump - performs what on initialization?


From: Jefferson Ogata <Jefferson.Ogata () noaa gov>
Date: Fri, 11 Apr 2003 17:06:15 -0400

Guy Harris wrote:
On Fri, Apr 11, 2003 at 12:34:47PM -0400, Jefferson Ogata wrote:

For one thing ifconfig down/up sends a gratuitous arp. If gratuitous arp solves the problem, you may have an IP address conflict on your LAN.

That wouldn't explain why running tcpdump unwedges the interface,
however, unless on the version of Linux his servers are running, doing
so causes a gratuitious ARP.

Clearly, but perhaps in promiscuous mode his machine starts getting IP traffic again, responds to something, and this unwedges the interface.

--
Jefferson Ogata <Jefferson.Ogata () noaa gov>
NOAA Computer Incident Response Team (N-CIRT) <ncirt () noaa gov>

-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe


Current thread: