Thanks for Arrigo Triulzi, who noted that I need to issue the command
"pfconfig +copyall -all" to allow tcpdump to receive packets sent and
received by the kernel-resident protocol software.
- Marko
My original problem:
> It seems as if only arp and rip packets and packets to and from ports
> 137 and 138 are reported by tcpdump. Pings or ongoing ssh, ftp and http
> connections are not visible at all. I tried unconfiguring ipfilter from
> the kernel, and it didn't have any effect. I'm running Tru64 UNIX V5.1A.
>
> - Marko
>
Received on Fri Dec 13 2002 - 18:23:48 NZDT