Re: tcpdump between Solaris and Linux servers??



Giovanni wrote:
3) tcpdump -nnpi eth2 host Solaris-3
- Works; Captures the packets between Linux server(at eth2) and
Solaris server
------------------------------------------------
Does anybody have a clue about why 'tcpdump host linux-1 and Solaris-3'
does not work?

If you do not specify an interface tcpdump uses eth0 and your machines
are connected to eth2.
I checked for this:
---
linux-1# grep linux-1 /etc/hosts
10.10.10.1 linux-1-int Internal LAN
220.124.26.132 linux-1 Public LAN
---
linux-1# ifconfig -a
eth0 Link encap:Ethernet HWaddr 00:1E:9C:6E:96:4A
inet addr:10.10.10.1 Bcast:10.10.10.255 Mask:255.255.255.0
eth2 Link encap:Ethernet HWaddr 00:0F:4E:D7:1E:6C
inet addr:220.124.26.132 Bcast:220.124.255.255
Mask:255.255.0.0
---
Solaris-3$grep Solaris-3 /etc/hosts
220.124.26.47 Solaris-3

As I had mentioned earlier, I tried with
#tcpdump host linux-1 and Solaris-3
This should work, as the linux-1 is the IP address assigned for the
eth2 interface. But, it did not work.

When I tried with:
#tcpdump -nnpi eth2 host Solaris-3
it worked correctly.

It is still a mystery for me! Now, I suspect there is a bug in the
Linux release.

.