Hello I have a problem with running tcpdump on network devices used in bridge group: The bridge configuration is as follows: /usr/sbin/brctl addbr br0 /usr/sbin/brctl stp br0 no /sbin/ifconfig eth0 up /usr/sbin/brctl addif br0 eth0 /usr/sbin/brctl addif br0 wlan0 brctl show command output: # brctl show bridge name bridge id STP enabled interfaces br0 8000.0014bf6f81b2 no eth0 wlan0 ifconfig command output: # ifconfig br0 Link encap:Ethernet HWaddr 00:14:BF:6F:81:B2 inet addr:10.1.1.201 Bcast:192.168.1.255 Mask: 255.255.255.0 UP BROADCAST RUNNING PROMISC MULTICAST MTU:1500 Metric:1 RX packets:9541 errors:0 dropped:0 overruns:0 frame:0 TX packets:2717 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:1806483 (1.7 MiB) TX bytes:312466 (305.1 KiB) eth0 Link encap:Ethernet HWaddr 00:14:BF:6F:81:B2 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:10111 errors:0 dropped:0 overruns:0 frame:0 TX packets:3139 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:1897558 (1.8 MiB) TX bytes:354798 (346.4 KiB) lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) wlan0 Link encap:Ethernet HWaddr 00:14:BF:6F:81:B2 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:435 errors:0 dropped:0 overruns:0 frame:0 TX packets:5853 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:42715 (41.7 KiB) TX bytes:625334 (610.6 KiB) The problem is that tcpdump does not show any traffic when attached to eth0 or wlan0. Traffic directed to the bridging device is visible on br0. What should I do to make tcpdump see traffic entering eth0 and wlan0 ? Note that this is an embedded MIPS based device with binary only network interface kernel modules ( linksys router running linux ) . tcpdump/pcap versions: tcpdump version 3.9.5 libpcap version 0.9.5 WoytekM -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.linux-foundation.org/pipermail/bridge/attachments/20061127/6043ade3/attachment-0001.htm