[Bug 455774] tcpdump doesn't work on usb0 network device

19 Mar 2009

      https://bugzilla.novell.com/show_bug.cgi?id=455774

User joop_boonen@web.de added comment
https://bugzilla.novell.com/show_bug.cgi?id=455774#c19

Joop Boonen <joop_boonen@web.de> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEEDINFO                    |ASSIGNED
      Info Provider|joop_boonen@web.de          |

--- Comment #19 from Joop Boonen <joop_boonen@web.de>  2009-03-19 11:13:24 MST ---
With both the old (original openSuSE 11.1 tcpdump) and the new one -D doesn't
any interface different than the eth and br interface(s).

Old:
athlon64-x2:~ # ifconfig -a
br0       Link encap:Ethernet  HWaddr 00:11:09:DC:5F:71  
          inet addr:192.168.0.229  Bcast:192.168.0.255  Mask:255.255.255.0
          inet6 addr: fe80::211:9ff:fedc:5f71/64 Scope:Link               
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1              
          RX packets:7604 errors:0 dropped:0 overruns:0 frame:0           
          TX packets:4765 errors:0 dropped:0 overruns:0 carrier:0         
          collisions:0 txqueuelen:0                                       
          RX bytes:9783696 (9.3 Mb)  TX bytes:559719 (546.6 Kb)           

eth0      Link encap:Ethernet  HWaddr 00:11:09:DC:5F:72  
          BROADCAST MULTICAST  MTU:1500  Metric:1        
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000                        
          RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)              
          Interrupt:22 Base address:0x8000                    

eth1      Link encap:Ethernet  HWaddr 00:11:09:DC:5F:71  
          inet6 addr: fe80::211:9ff:fedc:5f71/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:7604 errors:0 dropped:0 overruns:0 frame:0
          TX packets:4772 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000                           
          RX bytes:9890248 (9.4 Mb)  TX bytes:560975 (547.8 Kb)  
          Interrupt:16 Base address:0xa000                       

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host     
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:26 errors:0 dropped:0 overruns:0 frame:0
          TX packets:26 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0                            
          RX bytes:1340 (1.3 Kb)  TX bytes:1340 (1.3 Kb)       

usb0      Link encap:Ethernet  HWaddr 22:43:B6:90:C5:8B  
          inet addr:192.168.1.1  Bcast:192.168.1.255  Mask:255.255.255.0
          inet6 addr: fe80::2043:b6ff:fe90:c58b/64 Scope:Link           
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1            
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0            
          TX packets:1 errors:0 dropped:0 overruns:0 carrier:0          
          collisions:0 txqueuelen:1000                                  
          RX bytes:0 (0.0 b)  TX bytes:90 (90.0 b)                      

athlon64-x2:~ # tcpdump -D
1.br0                     
2.eth1                    
3.lo                      
athlon64-x2:~ #

New:
athlon64-x2:~ # ifconfig -a
br0       Link encap:Ethernet  HWaddr 00:11:09:DC:5F:71  
          inet addr:192.168.0.229  Bcast:192.168.0.255  Mask:255.255.255.0
          inet6 addr: fe80::211:9ff:fedc:5f71/64 Scope:Link               
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1              
          RX packets:9964 errors:0 dropped:0 overruns:0 frame:0           
          TX packets:6160 errors:0 dropped:0 overruns:0 carrier:0         
          collisions:0 txqueuelen:0                                       
          RX bytes:12995813 (12.3 Mb)  TX bytes:674499 (658.6 Kb)         

eth0      Link encap:Ethernet  HWaddr 00:11:09:DC:5F:72  
          BROADCAST MULTICAST  MTU:1500  Metric:1        
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000                        
          RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)
          Interrupt:22 Base address:0x8000

eth1      Link encap:Ethernet  HWaddr 00:11:09:DC:5F:71
          inet6 addr: fe80::211:9ff:fedc:5f71/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:9964 errors:0 dropped:0 overruns:0 frame:0
          TX packets:6167 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:13135417 (12.5 Mb)  TX bytes:675971 (660.1 Kb)
          Interrupt:16 Base address:0xa000

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:26 errors:0 dropped:0 overruns:0 frame:0
          TX packets:26 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:1340 (1.3 Kb)  TX bytes:1340 (1.3 Kb)

usb0      Link encap:Ethernet  HWaddr 22:43:B6:90:C5:8B
          inet addr:192.168.1.1  Bcast:192.168.1.255  Mask:255.255.255.0
          inet6 addr: fe80::2043:b6ff:fe90:c58b/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:25 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 b)  TX bytes:5141 (5.0 Kb)

athlon64-x2:~ # tcpdump -D
1.br0
2.eth1
3.any (Pseudo-device that captures on all interfaces)
4.lo
athlon64-x2:~ #

As you can see any captures the usb interface too but also the other ones (as
mentioned behind the any interface):

athlon64-x2:~ # tcpdump: listening on any, link-type LINUX_SLL (Linux cooked),
capture size 96 bytes                                                           
tcpdump -vvv -lnping 192.168.1.42
PING 192.168.1.42 (192.168.1.42) 56(84) bytes of data.
18:11:29.568467 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP
(1), length 84)                                                                 
    192.168.1.1 > 192.168.1.42: ICMP echo request, id 64288, seq 1, length 64   
18:11:29.569208 IP (tos 0x0, ttl 64, id 39876, offset 0, flags [none], proto
ICMP (1), length 84)                                                            
    192.168.1.42 > 192.168.1.1: ICMP echo reply, id 64288, seq 1, length 64     
64 bytes from 192.168.1.42: icmp_seq=1 ttl=64 time=0.809 ms                     
18:11:30.572284 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP
(1), length 84)                                                                 
    192.168.1.1 > 192.168.1.42: ICMP echo request, id 64288, seq 2, length 64   
18:11:30.573175 IP (tos 0x0, ttl 64, id 39877, offset 0, flags [none], proto
ICMP (1), length 84)                                                            
    192.168.1.42 > 192.168.1.1: ICMP echo reply, id 64288, seq 2, length 64     
64 bytes from 192.168.1.42: icmp_seq=2 ttl=64 time=0.961 ms                     
^C                                                                              
--- 192.168.1.42 ping statistics ---                                            
2 packets transmitted, 2 received, 0% packet loss, time 1003ms                  
rtt min/avg/max/mdev = 0.809/0.885/0.961/0.076 ms                               
athlon64-x2:~ # ping 192.168.0.1
PING 192.168.0.1 (192.168.0.1) 56(84) bytes of data.
18:11:33.893171 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP
(1), length 84)                                                                 
    192.168.0.229 > 192.168.0.1: ICMP echo request, id 64544, seq 1, length 64  
18:11:33.893195 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP
(1), length 84)                                                                 
    192.168.0.229 > 192.168.0.1: ICMP echo request, id 64544, seq 1, length 64  
18:11:33.893860 IP (tos 0x0, ttl 64, id 1408, offset 0, flags [none], proto
ICMP (1), length 84)                                                            
    192.168.0.1 > 192.168.0.229: ICMP echo reply, id 64544, seq 1, length 64    
18:11:33.893860 IP (tos 0x0, ttl 64, id 1408, offset 0, flags [none], proto
ICMP (1), length 84)                                                            
    192.168.0.1 > 192.168.0.229: ICMP echo reply, id 64544, seq 1, length 64    
64 bytes from 192.168.0.1: icmp_seq=1 ttl=64 time=0.776 ms                      
18:11:34.569085 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has
192.168.1.1 tell 192.168.1.42, length 28                                        
18:11:34.569124 ARP, Ethernet (len 6), IPv4 (len 4), Reply 192.168.1.1 is-at
4a:1d:08:f8:a6:7c, length 28                                                    
18:11:34.896252 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP
(1), length 84)                                                                 
    192.168.0.229 > 192.168.0.1: ICMP echo request, id 64544, seq 2, length 64  
18:11:34.896272 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP
(1), length 84)                                                                 
    192.168.0.229 > 192.168.0.1: ICMP echo request, id 64544, seq 2, length 64  
18:11:34.896851 IP (tos 0x0, ttl 64, id 1409, offset 0, flags [none], proto
ICMP (1), length 84)                                                            
    192.168.0.1 > 192.168.0.229: ICMP echo reply, id 64544, seq 2, length 64    
18:11:34.896851 IP (tos 0x0, ttl 64, id 1409, offset 0, flags [none], proto
ICMP (1), length 84)                                                            
    192.168.0.1 > 192.168.0.229: ICMP echo reply, id 64544, seq 2, length 64    
64 bytes from 192.168.0.1: icmp_seq=2 ttl=64 time=0.666 ms                      
18:11:34.910267 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has
192.168.0.111 (ff:ff:ff:ff:ff:ff) tell 192.168.0.111, length 46                 
18:11:34.910267 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has
192.168.0.111 (ff:ff:ff:ff:ff:ff) tell 192.168.0.111, length 46                 
18:11:35.896258 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP
(1), length 84)                                                                 
    192.168.0.229 > 192.168.0.1: ICMP echo request, id 64544, seq 3, length 64  
18:11:35.896279 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP
(1), length 84)                                                                 
    192.168.0.229 > 192.168.0.1: ICMP echo request, id 64544, seq 3, length 64  
18:11:35.896864 IP (tos 0x0, ttl 64, id 1410, offset 0, flags [none], proto
ICMP (1), length 84)                                                            
    192.168.0.1 > 192.168.0.229: ICMP echo reply, id 64544, seq 3, length 64    
18:11:35.896864 IP (tos 0x0, ttl 64, id 1410, offset 0, flags [none], proto
ICMP (1), length 84)                                                            
    192.168.0.1 > 192.168.0.229: ICMP echo reply, id 64544, seq 3, length 64    
64 bytes from 192.168.0.1: icmp_seq=3 ttl=64 time=0.674 ms                      
^C                                                                              
--- 192.168.0.1 ping statistics ---                                             
3 packets transmitted, 3 received, 0% packet loss, time 2003ms                  
rtt min/avg/max/mdev = 0.666/0.705/0.776/0.054 ms                               
athlon64-x2:~ #

-- 
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

[Bug 455774] tcpdump doesn't work on usb0 network device

bugzilla_noreply＠novell.com