Linux, FreeBSD, Juniper, Cisco / Network security articles and troubleshooting guides

It is currently Tue Oct 03, 2023 2:56 pm

Message body:
Enter your message here, it may contain no more than 60000 characters. 

:D :) ;) :( :o :shock: :? 8-) :lol: :x :P :oops: :cry: :evil: :twisted: :roll: :!: :?: :idea: :arrow: :| :mrgreen: :geek: :ugeek:
Font size:
Font colour
BBCode is ON
[img] is ON
[flash] is OFF
[url] is ON
Smilies are ON
Disable BBCode
Disable smilies
Do not automatically parse URLs
Confirmation code
Confirmation code:
In an effort to prevent automatic submissions, we require that you enter both of the words displayed into the text field underneath.

Topic review - Understanding pcap-filter/tcpdumps 'localnet' background
Author Message
Post subject: Understanding pcap-filter/tcpdumps 'localnet' background  |  Post Posted: Thu Oct 01, 2015 3:10 pm
Hello !
In all tcpdump docs, one can find this - or a similar - line:

To select traffic neither sourced from nor destined for local hosts (if you gateway to one other net, this stuff should never make it onto your local net).

ip and not net localnet

I really needed some time to find out, that the mentioned 'localnet' must be in '/etc/networks' - which was not the case for me, wether for my debian squeeze nor for my ubunto 12. I added it - but, ether I dont understand or something does not work.

I see all traffic from and to the local box comin/going to other computer.

If I use instead
ip and (not net

If someone could this explain, this woul me make a little happier ;-)
I need it that often. Excluding the localhost by its name works.

Thanks anyway and
best reagrds,

Jump to:  
News News Site map Site map SitemapIndex SitemapIndex RSS Feed RSS Feed Channel list Channel list

Delete all board cookies | The team | All times are UTC - 5 hours [ DST ]