On Mon, Feb 04, 2002 at 01:17:38PM -0500, Michael Richardson wrote:
> Any updates appreciated, even if it turns out to be "0.7 will never work
> with 2.0.39" :-(
0.7.2 should work with 2.0.39, and other 2.0[.x] kernels, when released.
Of course, it won't work as well as it will on 2.2 and later kernels, as
per the item in the BUGS section of the tcpdump man page:
On Linux systems with 2.0[.x] kernels:
packets on the loopback device will be seen twice;
packet filtering cannot be done in the kernel, so
that all packets must be copied from the kernel in
order to be filtered in user mode;
all of a packet, not just the part that's within
the snapshot length, will be copied from the kernel
(the 2.0[.x] packet capture mechanism, if asked to
copy only part of a packet to userland, will not
report the true length of the packet; this would
cause most IP packets to get an error from tcp-
dump);
capturing on some PPP devices won't work correctly.
We recommend that you upgrade to a 2.2 or later kernel.
(The "capturing on some PPP devices won't work correctly" item is a
recent addition, which will show up in the tcpdump 3.7.2 man page, when
released.)
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
