rc.37 apparant icmp bug

Peter Van Epp vanepp at sfu.ca
Wed Jan 24 22:03:21 EST 2007


	Looks like Mac addresses aren't being captured (or perhaps only not 
being displayed) correctly for icmp:

   18:00:01.578744  v          udp     142.58.207.192.35599    <->       142.58.103.1.53            6        6          486         1098   CON    0:d:56:fd:f1:70    0:11:88:5:5d:1d
   18:11:24.511852  v s        tcp       142.58.6.163.4229      ->     142.58.207.192.445           3        3          198          192   RST    0:11:88:5:5d:1d    0:d:56:fd:f1:70
   18:38:11.063662  v         icmp       199.60.7.131          <->     142.58.207.192               6        6          468          468   ECO        0:0:0:0:0:0        0:0:0:0:0:0


	I'll try and grab a test tcpdump file tomorrow.

Peter Van Epp / Operations and Technical Support 
Simon Fraser University, Burnaby, B.C. Canada




More information about the argus mailing list