tcpdump mailing list archives

LINUX_SLL2 printing update


From: Francois-Xavier Le Bail via tcpdump-workers <tcpdump-workers () lists tcpdump org>
Date: Sat, 9 May 2020 00:57:32 -0400 (EDT)

--- Begin Message --- From: Francois-Xavier Le Bail <devel.fx.lebail () orange fr>
Date: Sat, 9 May 2020 06:59:12 +0200
Hello,

As a user, I think the current print with LINUX_SLL2 on the "any" interface is not optimal.

tcpdump -nt:
ifindex 2 (eth0) IP 192.168.1.1 > 9.9.9.9: ICMP echo request, id 1098, seq 1, length 64
ifindex 2 (eth0) IP 9.9.9.9 > 192.168.1.1: ICMP echo reply, id 1098, seq 1, length 64

tcpdump -nte:
ifindex 2 (eth0) Out 00:50:79:ab:cd:ef ethertype IPv4 (0x0800), length 104: 192.168.1.1 > 9.9.9.9:
ICMP echo request, id 1109, seq 1, length 64
ifindex 2 (eth0)  In 00:50:79:12:34:56 ethertype IPv4 (0x0800), length 104: 9.9.9.9 > 192.168.1.1:
ICMP echo reply, id 1109, seq 1, length 64

For a quick look, I don't need 'ifindex N', but I need 'In/Out,...'

Thus I propose to print:
tcpdump -nt:
eth0 Out 192.168.1.1 > 9.9.9.9: ICMP echo request, id 1109, seq 1, length 64
eth0  In 9.9.9.9 > 192.168.1.1: ICMP echo reply, id 1109, seq 1, length 64

tcpdump -nte:
eth0 Out ifindex 2 00:50:79:ab:cd:ef ethertype IPv4 (0x0800), length 104: 192.168.1.1 > 9.9.9.9:
ICMP echo request, id 1109, seq 1, length 64
eth0  In ifindex 2 00:50:79:12:34:56 ethertype IPv4 (0x0800), length 104: 9.9.9.9 > 192.168.1.1:
ICMP echo reply, id 1109, seq 1, length 64

We can change because the printing is currently not supported in any release version, thus no
usage/habit/greping really defined.

-- 
Francois-Xavier

--- End Message ---
_______________________________________________
tcpdump-workers mailing list
tcpdump-workers () lists tcpdump org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers

Current thread: