Hi all
I'm having a peculiar problem with 'tcpdump' on a OpenBSD 3.7 (20050404 snap) amd64. ('dmesg, + 'sysctl' + 'fstab' are below)
tcpdump with 0-2 flags = output. tcpdump with 3-x flags = no output. tcpdump with x flags and '-w' = non written at all.
When 'tcpdump' is stopped I recive normal 'tcpdump' statistics i.e. something must be working. No error-logs to guide me.
EXAMPLE:
$ sudo tcpdump -n -i em1 = output.
$ sudo tcpdump -e -n -i em1 -s 1515 src net xxx.xxx.xxx.0 and not arp = no output.
$ sudo tcpdump -e -n -i em1 -s 1515 -w /data/tcpdumps/20050509_all.lpc src net xxx.xxx.xxx.0 and not arp &
= none written.
Why in the name of <somebody> is 'tcpdump' semi-working and why can't 'tcpdump' write to a file. I have not seen this before, ever.
I'm no tcpdump-newbie and this server has with OpenBSD 3.6 and single cpu and same nic's, been running tcpdump just fine. The extra cpu is for psql, syslog-ng, snort, honeyd et al,
respectfully /per [EMAIL PROTECTED]
###################################### dmesg, sysctl and fstab below: ######################################
dmesg:
OpenBSD 3.7-current (GENERIC.MP) #0: Thu Apr 14 23:24:22 CEST 2005
[EMAIL PROTECTED]:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 2147086336 (2096764K)
avail mem = 1836515328 (1793472K)
using 22937 buffers containing 214917120 bytes (209880K) of memory
mainbus0 (root)
mainbus0: Intel MP Specification (Version 1.1) (TYAN S2882 )
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: AMD Opteron(tm) Processor 242, 1594.16 MHz
cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,NXE,MMXX,LONG,3DNOW2,3DNOW
cpu0: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 1MB 64b/line 16-way L2 cache
cpu0: ITLB 32 4KB entries fully associative, 8 4MB entries fully associative
cpu0: DTLB 32 4KB entries fully associative, 8 4MB entries fully associative
cpu0: apic clock running at 199236672Hz
cpu1 at mainbus0: apid 1 (application processor)
cpu1: AMD Opteron(tm) Processor 242, 1593.89 MHz
cpu1: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,NXE,MMXX,LONG,3DNOW2,3DNOW
cpu1: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 1MB 64b/line 16-way L2 cache
cpu1: ITLB 32 4KB entries fully associative, 8 4MB entries fully associative
cpu1: DTLB 32 4KB entries fully associative, 8 4MB entries fully associative
mpbios: bus 0 is type PCI
mpbios: bus 1 is type PCI
mpbios: bus 2 is type PCI
mpbios: bus 3 is type PCI
mpbios: bus 4 is type ISA
ioapic0 at mainbus0 apid 2: pa 0xffff800003875e24, version 11, 24 pins
ioapic1 at mainbus0 apid 3: pa 0xffff800003875d24, version 11, 4 pins
ioapic2 at mainbus0 apid 4: pa 0xffff800003875c24, version 11, 4 pins
pci0 at mainbus0 bus 0: configuration mode 1
ppb0 at pci0 dev 6 function 0 "AMD 8111 PCI-PCI" rev 0x07
pci1 at ppb0 bus 3
ohci0 at pci1 dev 0 function 0 "AMD 8111 USB" rev 0x0b: apic 2 int 19 (irq 10), version 1.0, legacy support
usb0 at ohci0: USB revision 1.0
uhub0 at usb0
uhub0: AMD OHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 3 ports with 3 removable, self powered
ohci1 at pci1 dev 0 function 1 "AMD 8111 USB" rev 0x0b: apic 2 int 19 (irq 10), version 1.0, legacy support
usb1 at ohci1: USB revision 1.0
uhub1 at usb1
uhub1: AMD OHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub1: 3 ports with 3 removable, self powered
pciide0 at pci1 dev 5 function 0 "CMD Technology SiI3114 SATA" rev 0x02: DMA
pciide0: using apic 2 int 19 (irq 10) for native-PCI interrupt
pciide0: port 0: device present, speed: 1.5Gb/s
wd0 at pciide0 channel 0 drive 0: <Maxtor 6B250S0>
wd0: 16-sector PIO, LBA48, 239372MB, 490234752 sectors
wd0(pciide0:0:0): using BIOS timings, Ultra-DMA mode 6
pciide0: port 1: device present, speed: 1.5Gb/s
wd1 at pciide0 channel 1 drive 0: <Maxtor 6B250S0>
wd1: 16-sector PIO, LBA48, 239372MB, 490234752 sectors
wd1(pciide0:1:0): using BIOS timings, Ultra-DMA mode 6
vga1 at pci1 dev 6 function 0 "ATI Rage XL" rev 0x27
wsdisplay0 at vga1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
"AMD AMD8111 LPC" rev 0x05 at pci0 dev 7 function 0 not configured
pciide1 at pci0 dev 7 function 1 "AMD 8111 IDE" rev 0x03: DMA, channel 0 configured to compatibility, channel 1 configured to compatibility
atapiscsi0 at pciide1 channel 0 drive 1
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: <TEAC, CD-232E, 1.0A> SCSI0 5/cdrom removable
cd0(pciide1:0:1): using PIO mode 4, Ultra-DMA mode 2
pciide1: channel 1 disabled (no drives)
"AMD 8111 SMBus" rev 0x02 at pci0 dev 7 function 2 not configured
"AMD 8111 ACPI" rev 0x05 at pci0 dev 7 function 3 not configured
ppb1 at pci0 dev 10 function 0 "AMD 8131 PCIX" rev 0x12
pci2 at ppb1 bus 2
bge0 at pci2 dev 9 function 0 "Broadcom BCM5704C" rev 0x03, BCM5704 A3 (0x2003): apic 3 int 0 (irq 5) address 00:e0:81:2d:9d:5a
brgphy0 at bge0 phy 1: BCM5704 10/100/1000baseT PHY, rev. 0
bge1 at pci2 dev 9 function 1 "Broadcom BCM5704C" rev 0x03, BCM5704 A3 (0x2003): apic 3 int 1 (irq 9) address 00:e0:81:2d:9d:5b
brgphy1 at bge1 phy 1: BCM5704 10/100/1000baseT PHY, rev. 0
"AMD 8131 PCIX IOAPIC" rev 0x01 at pci0 dev 10 function 1 not configured
ppb2 at pci0 dev 11 function 0 "AMD 8131 PCIX" rev 0x12
pci3 at ppb2 bus 1
em0 at pci3 dev 3 function 0 "Intel PRO/1000MT DP (82546EB)" rev 0x03: apic 4 int 0 (irq 5), address: 00:04:23:a5:d9:4e
em1 at pci3 dev 3 function 1 "Intel PRO/1000MT DP (82546EB)" rev 0x03: apic 4 int 1 (irq 9), address: 00:04:23:a5:d9:4f
"AMD 8131 PCIX IOAPIC" rev 0x01 at pci0 dev 11 function 1 not configured
pchb0 at pci0 dev 24 function 0 "AMD AMD64 HyperTransport" rev 0x00
pchb1 at pci0 dev 24 function 1 "AMD AMD64 Address Map" rev 0x00
pchb2 at pci0 dev 24 function 2 "AMD AMD64 DRAM Cfg" rev 0x00
pchb3 at pci0 dev 24 function 3 "AMD AMD64 Misc Cfg" rev 0x00
pchb4 at pci0 dev 25 function 0 "AMD AMD64 HyperTransport" rev 0x00
pchb5 at pci0 dev 25 function 1 "AMD AMD64 Address Map" rev 0x00
pchb6 at pci0 dev 25 function 2 "AMD AMD64 DRAM Cfg" rev 0x00
pchb7 at pci0 dev 25 function 3 "AMD AMD64 Misc Cfg" rev 0x00
isa0 at mainbus0
com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
com1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0 (mux 1 ignored for console): console keyboard, using wsdisplay0
pmsi0 at pckbc0 (aux slot)
pckbc0: using irq 12 for aux slot
wsmouse0 at pmsi0 mux 0
pcppi0 at isa0 port 0x61
sysbeep0 at pcppi0
lm0 at isa0 port 0x290/8: W83627HF
dkcsum: wd0 matched BIOS disk 80
dkcsum: wd1 matched BIOS disk 81
root on wd0a
rootdev=0x0 rrootdev=0x300 rawdev=0x302
cpu1: CPU 1 running
sysctl:
# $OpenBSD: sysctl.conf,v 1.35 2005/04/01 04:11:55 deraadt Exp $ # # This file contains a list of sysctl options the user wants set at # boot time. See sysctl(3) and sysctl(8) for more information on # the many available variables. # net.inet.ip.forwarding=1 # 1=Permit forwarding (routing) of packets net.inet6.ip6.forwarding=1 # 1=Permit forwarding (routing) of packets ddb.panic=0 # 0=Do not drop into ddb on a kernel panic vm.swapencrypt.enable=0 # 0=Do not encrypt pages that go to swap kern.seminfo.semmni=256 # psql requirements kern.seminfo.semmns=2048 # psql requirements kern.shminfo.shmmax=50331648 # psql requirements
fstab:
/dev/wd0a / ffs rw,softdep 1 1 /dev/wd1f /home ffs rw,softdep,nodev,nosuid 1 2 /dev/wd0d /tmp ffs rw,softdep,nodev,nosuid 1 2 /dev/wd0e /usr ffs rw,softdep,nodev 1 2 /dev/wd0f /usr/local ffs rw,softdep,nodev 1 2 /dev/wd1a /usr/obj ffs rw,softdep,nodev,nosuid 1 2 /dev/wd1d /var ffs rw,softdep,nodev,nosuid 1 2 /dev/wd1e /var/tmp ffs rw,softdep,nodev,nosuid 1 2 /dev/wd1b none swap sw 0 0 /dev/ccd0c /data ffs rw,softdep,nodev,nosuid 1 2
