tcpdump mailing list archives

Re: tcpdump output format


From: Hannes Gredler <hannes () juniper net>
Date: Wed, 08 Mar 2006 06:16:18 +0100

latha,

i fail to understand what your problem is ...
what disturbs you with the (broadcast) output
i.e. what is wrong with this ?

/hannes

Latha G wrote:
Hi Hanees,

Thanks for ur reply...
I referred print-arp.c for arp output format..no where i found (Broadcast)
is using...but it is appearing on the output...[refer to my first mail]
If there is no such information like the output should be printed like
this..
then how can we know whether it is a correct output or not..

And one more thing is , Is the tcpdump tested on any platform(OS)? so that i
can refer
the output on that platform..

My tcpdump version: 3.9.4


On 3/6/06, Hannes Gredler <hannes () juniper net> wrote:



Latha G wrote:

Hi all,

I have one question about the output format of tcpdump.
How can we know whether the output from the tcpdump is in the correct
format?
Any file is there to know about the format of the output?

there is no central file - very printer controls its own output formay


The printing of packets on the standard output is tcpdump's

implementation

dependent, right?

correct - whenever we add/improve a printer the output format is likely
to change ;-)


Is the the output format will be changed from version to version???

not regularly


Then, where can I find the format of the output?

ls -l print-*.c


like for IP packets the output should be like that.....

i am afraid there is no such document ...


in that way , i want...

I got the doubt because......
arp packet once i got is,
   13:39:20.680816 arp who-has 172.16.0.136 tell mech_23_28.ac.in
and some other time i got is,
    13:39:20.680816 arp who-has 172.16.0.136 (Broadcast) tell
mech_23_28.ac.in
Any small help be appreciated..

-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.





--
Thaks & Regards,
Latha.
-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.
-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.


Current thread: