try #tcpdump arp to see only arp packages. wants to get link-level header? Add -e option..
2005/9/12, ed <[EMAIL PROTECTED]>: > On Mon, 12 Sep 2005 13:26:19 -0400 > "Will H. Backman" <[EMAIL PROTECTED]> wrote: > > > > > > > This has most of the data that I need, but it seems to be missing > > > one thing > > > that I think is important. How can I determine if the traffic is > > > TCP/UDP/ICMP etc? > > > > > If you have ack and window flags, then it is TCP, not UDP. > > What should I use to see packets at the ethernet level, such as ARP? > > -- > http://edd.link9.net - http://irc.is-cool.net > > -- Huzeyfe VNAL --- First Turkish Qmail book is out! Go check it. Duydunuz mu! Turkiye'nin ilk Qmail kitabi cikti. http://www.acikakademi.com/catalog/qmail/
