(Full bug record. All replies will go into bugzilla - please trim text)
[EMAIL PROTECTED] wrote: > > http://bugzilla.kernel.org/show_bug.cgi?id=5175 > > Summary: Kernel 2.6.13 breaks libpcap (at least on ppp) > Kernel Version: 2.6.13 > Status: NEW > Severity: normal > Owner: [EMAIL PROTECTED] > Submitter: [EMAIL PROTECTED] > > > Most recent kernel where this bug did not occur: 2.6.12 > Distribution: Fedora Core 2 (with some updates) > Hardware Environment: Pentium III, dialup (serial port modem: ppp) > Software Environment: Linux, gcc 3.3.3, tcpdump/libpcap built from the > source RPM (Fedora development) for version 3.9.1) > Problem Description: tcpdump/libpcap not able to filter packets during capture > > Steps to reproduce: > > I use a tcptraceroute programme (well, I did until I updated to kernel > 2.6.13). > It sends TCP SYN/ACK and captures the ICMP error messages returned. > I use(d) traceproto and tcptraceroute. > In kernel 2.6.13 they do not work (the standard, UDP, traceroute which comes > with FC2 does work). > Both use libnet and libpcap. > > libpcap can capture packets: > > tcpdump -w 1.cap > > works > > and I can extract the ICMP packets when I write the captured packets to a > file. > > tcpdump -f "ip proto \icmp" -r 1.cap > > works. > > > However, it cannot filter the packets as it captures: > > tcpdump -f "ip proto \icmp" > > fails (as does tethereal, but in tethereal I can capture all the packets and > use > a '-R', read filter, to capture all packets, which works, but only display the > ones I want = so I had to change a script from "capture filter" to "read > filter"). > > I would guess that trying to filter out the ICMP (for the time exceeded error > messages) is failing in traceproto and tcptraceroute (but why not in the > standard UDP traceroute while traceproto fails both in TCP and UDP modes?). > > ------- You are receiving this mail because: ------- > You are on the CC list for the bug, or are watching someone who is. - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html
