rc.37 apparant icmp bug
Peter Van Epp
vanepp at sfu.ca
Wed Jan 24 22:03:21 EST 2007
Looks like Mac addresses aren't being captured (or perhaps only not
being displayed) correctly for icmp:
18:00:01.578744 v udp 142.58.207.192.35599 <-> 142.58.103.1.53 6 6 486 1098 CON 0:d:56:fd:f1:70 0:11:88:5:5d:1d
18:11:24.511852 v s tcp 142.58.6.163.4229 -> 142.58.207.192.445 3 3 198 192 RST 0:11:88:5:5d:1d 0:d:56:fd:f1:70
18:38:11.063662 v icmp 199.60.7.131 <-> 142.58.207.192 6 6 468 468 ECO 0:0:0:0:0:0 0:0:0:0:0:0
I'll try and grab a test tcpdump file tomorrow.
Peter Van Epp / Operations and Technical Support
Simon Fraser University, Burnaby, B.C. Canada
More information about the argus
mailing list