On Wed, Mar 24, 1999 at 09:08:57PM +0000, David Kaplan wrote:
> I'm running redhat linux 5.2 with kernel 2.2.3 and I've compiled and i'm
> now analyzing fine. However, I see everything, including IPX, UDP,
> etc., except no TCP. Any ideas? Thank you all for your time.
Yes:
But without more information i can only guess:
A) You are on a switched LAN:
You see only Layer-2 Broadcasts and Multicasts:
including:
ARPS, DHCP, OSPF(IP), Squid ICP(UDP), IPX Broadcasts, IGMP, CDP,
(TCP can't be used for Multicast Transmissions)
B) You are the "only" station in a quiet network
you see your own traffic:
including:
IPX: netware emulator
UDP: DNS queries
In both cases you would see TCP flows, if your own station would have an active
TCP socket. (Try using a web-browser while capturing packets)
wkr
Hannes
--
--
"The nice thing about standards is that there's so many to choose from."
-- Andrew S. Tanenbaum
!------------------------------------------------------------------!
Hannes R. Boehm
email : hannes@xxxxxxxxx
www : http://hannes.boehm.org
PGP-key : http://hannes.boehm.org/hannes-pgp.asc
!------------------------------------------------------------------!