Re: [tcpdump-workers] Intel X520-SR2 not seeing packets in tcpdump

2012-03-01 Thread Mark W. Jeanmougin
On Thu, Mar 1, 2012 at 11:55, Charles DeVoe wrote: > I have installed an X520 card with the latest driver ixgbe 3.8.  The > operating systems is CentOS 5.7.  When doing an ifconfig I see receive > packets.  I also see packets when I do an ethtool -S p1p2.  However, when I > do tcpdump -i p1p2 I

Re: [tcpdump-workers] tcpdump: file.pcap0: Permission denied

2012-02-06 Thread Mark W. Jeanmougin
Hey Jerome, I should've been more specific. I wanted to see permissions and ownership on the files created by tcpdump. How about: tcpdump -i eth0 -s 65535 -w /data/capture_rotate_`date +%Y_%m_%d`.pcap1 tcpdump -i eth0 -s 65535 -w /data/capture_rotate_`date +%Y_%m_%d`.pcap2\ -C 4 ls -al /data

Re: [tcpdump-workers] tcpdump: file.pcap0: Permission denied

2012-02-06 Thread Mark W. Jeanmougin
On 02/06/2012 09:54 AM, Jerome Yanga wrote: No dice. :( The chmod did not change anything. I started with and this worked. tcpdump -i eth0 -s 65535 -w /data/capture_rotate_`date +%Y_%m_%d`.pcap1 As soon as I added the "-C", I got the same error. tcpdump -i eth0 -s 65535 -w /data/capture_rot

Re: [tcpdump-workers] tcpdump: file.pcap0: Permission denied

2012-02-06 Thread Mark W. Jeanmougin
On 02/03/2012 07:04 PM, Jerome Yanga wrote: The permissions on the /data directory is ... # ls -alh /data/ total 4.1M drwxr-xr-x 2 root root 4.0K Feb 3 15:21 . dr-xr-xr-x. 23 root root 4.0K Feb 3 06:49 .. -rw-r--r-- 1 root root 4.0M Feb 3 07:29 502_capture-seed.txt Try running 'chmod a+w

Re: [tcpdump-workers] tcpdump: file.pcap0: Permission denied

2012-02-03 Thread Mark W. Jeanmougin
Hey Jerome, On 02/03/2012 01:53 PM, Jerome Yanga wrote: When I attempt to run the following command... tcpdump -i eth0 -s 65535 -w /data/capture_rotate_`date +%Y_%m_%d`.pcap -C 4 -W 10 -G 300 -z bzip2 -F /data/capture-seed.txt ...I get the following error. tcpdump: /data/capture_rotate_2012_02

Re: [tcpdump-workers] 10Gig Frames not searchable?

2012-01-17 Thread Mark W. Jeanmougin
On 01/17/2012 03:55 PM, sth...@nethelp.no wrote: You may have VLAN tagged packets. try "tcpdump -e -r ..." to see any Ethernet details, including possible VLAN tags. That did it! So, now my searches look like this: tcpdump -r filename.pcap 'vlan && host 1.1.1.1' I'm now getting the results I

[tcpdump-workers] 10Gig Frames not searchable?

2012-01-17 Thread Mark W. Jeanmougin
Hello all, I'm experiencing a problem with tcpdump, and I hope you guys can point me in a good direction. Here's the short version: Running "tcpdump -r 10Gig.pcap host 1.1.1.1" returns zero frames. Running the same thing without the filter shows tcp packets from that IP. System Configuration: *