Looks like non character data, binary file ? K
-----Original Message----- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Harry Metske Sent: Wednesday, May 16, 2007 7:05 AM To: LINUX-390@VM.MARIST.EDU Subject: TCPIP sniffering Hi, we are quite new to zLinux (not to linux). We have some troubles with TCPIP networking, and are trying to diagnose some things. One of the first things we do is start sniffering on the network devices (tcpdump or ethereal). When we do this on zLinux, we see only weird packets passing, not anything that is recognized by either tcpdump or ethereal. The packets look like this : 13:01:38.311734 40:00:7a:06:07:eb (oui Unknown) > 45:60:00:5c:43:5c (oui Unknown), ethertype Unknown (0xac1e), length 92: 0x0000: aac9 9148 ccc4 0f22 0016 e598 2910 a9ca ...H..."....)... 0x0010: 8e23 5018 3f98 4977 0000 2bc9 1329 5c8c .#P.?.Iw..+..)\. 0x0020: 225d e502 e80e d104 d626 3a28 cf4e 292f "].......&:(.N)/ 0x0030: 64bc 1332 6db8 29df d6f3 b46d e9ce c496 d..2m.)....m.... 0x0040: 4ef6 53a4 8c80 9c5d 581f 1df3 2c2d N.S....]X...,- There are thousands of packets like this passing in just a few seconds. The symptoms are the same for both OSA devices as HiperSockets. Are we missing something here ? I know we can somehow do similar thing under z/VM, but at the moment the Linux environment is more comfortable to us, so any advice is welcome. regards, Harry Metske ================================================ De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt, wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. Rabobank Nederland is een handelsnaam van de Cooperatieve Centrale Raiffeisen-Boerenleenbank B.A.Rabobank Nederland staat ingeschreven bij de K.V.K. onder nr. 30046259 ================================================ The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. Rabobank Nederland is a trade name of Cooperatieve Centrale Raiffeisen-Boerenleenbank B.A. Rabobank Nederland is registered by the Chamber of commerce under nr. 30046259 ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390