Re: tcpdump -T output format

[Guy Harris <guy () alum mit edu>]

Latha G wrote:

> Please any one help me to understand the tcpdump -T option..
> Actually why is this necessary to interpret one packet to be of other type,

Because, for TCP segments and UDP datagrams, tcpdump bases its decision 
of which protocol's running atop the transport protocol on the TCP or 
UDP port number, and because some protocols don't have a fixed port 
number assigned to them - e.g., RTP and RTCP, as per Bruce Simpson's mail.

The "-T" option lets you manually specify a different port number for a 
given protocol.
-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.