Hi, I am running tcpdump3.4 on RedHat 2.2.18 The tcpdump output prints a flag right after the timestamp which is not reported on the man page. It is normally the '>' or '<' depending on the directionality of the packet. But sometimes it prints 'P' and it looks like that the packet is duplicated as i see another instance of the same packet but delayed by a few microseconds. Does that have something to do with the promiscuous mode. (Having -p or not in the options does not affect this) Just so you know I am using GRE tunnels and this above capture was on eth0. Here is the actual capture command tcpdump -nl -tt -pi eth0 tcp port 80 So can you explain why am I seeing those duplicated 'P' packets thanks, Joe __________________________________________________ Do You Yahoo!? Get personalized email addresses from Yahoo! Mail http://personal.mail.yahoo.com/ - This is the TCPDUMP workers list. It is archived at http://www.tcpdump.org/lists/workers/index.html To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
