I am using the latest FreeBSD 6-stable and I am still having trouble dumping tcpdump in clear text data. In FreeBSD 5.x using 'tcpdump -A -s 0 -i sk0' I would always give me a full screen Ascii dump of current network data to the screen but now it just shows everything in Hex. I submitted a send-pr on this sometime around 6.0 release but it never got anywhere. If you use the same command on 5.x it works fine. I found the closest thing I can get is using tcpdump -XX -s 0 -i sk0 which dumps both Hex and Acsii anything with the '-A' which is normally the important flag always results in Hex dumps. Installing ngrep from ports and doing 'ngrep -d sk0' gives me the result I want but I have found over time that ngrep often fails to work depending on when I track 6-stable, I would prefer to use tcpdump always working. Can any one agree with me there is a bug here? I have the same result on multiple machines. Cheers, Mike
Looks broken to me. Try the attached patch which should fix it.
Steve
----- Original Message -----
From: "Michael Vince" <mv@roq.com>
> Can any one agree with me there is a bug here? I have the same result on
> multiple machines.
===============================================This e.mail is private and
confidential between Multiplay (UK) Ltd. and the person or entity to whom it is
addressed. In the event of misdirection, the recipient is prohibited from using,
copying, printing or otherwise disseminating it or any information contained in
it.
In the event of misdirection, illegible or incomplete transmission please
telephone (023) 8024 3137
or return the E.mail to postmaster@multiplay.co.uk.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: tcpdump.c.patch
Type: application/octet-stream
Size: 761 bytes
Desc: not available
Url :
http://lists.freebsd.org/pipermail/freebsd-stable/attachments/20060304/c6ed2adb/tcpdump.c.obj
> Looks broken to me. Try the attached patch which should fix it.It would probably be better to try to stay in sync with the "official" tcpdump at www.tcpdump.org. Both the latest (current) version, fetched today: http://www.tcpdump.org/daily/tcpdump-current.tar.gz and the latest release version, 3.9.4: http://www.tcpdump.org/release/tcpdump-3.9.4.tar.gz have the -A option working the same way as in 5.x. 6.1-PRERELEASE seems to have tcpdump version 3.9.1. So I would recommend simply importing the 3.9.4 version instead of adding a local patch. Steinar Haug, Nethelp consulting, sthaug@nethelp.no> > Steve > ----- Original Message ----- > From: "Michael Vince" <mv@roq.com> > > > Can any one agree with me there is a bug here? I have the same result on > > multiple machines. > > ===============================================> This e.mail is private and confidential between Multiplay (UK) Ltd. and the person or entity to whom it is addressed. In the event of misdirection, the recipient is prohibited from using, copying, printing or otherwise disseminating it or any information contained in it. > > In the event of misdirection, illegible or incomplete transmission please telephone (023) 8024 3137 > or return the E.mail to postmaster@multiplay.co.uk.