Re: capturing only wrong checksum packets

[Rick Jones <rick.jones2 () hp com>]

Guy Harris wrote:
> Mohan Lal Jangir wrote:
>
> > How can I capture "only wrong checksum packets" using tcpdump 
> > (specially wrong udp checksum)?
>
>
> Unfortunately, there's no way to do so with an unmodified tcpdump.

And even if there were, if you happened to be taking the trace on a 
system with CKO (ChecKsum Offload) enabled, you would probably see 
incorrect checksums for all outbound traffic.

rick jones
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.