Linux, FreeBSD, Juniper, Cisco / Network security articles and troubleshooting guides

FAQ
It is currently Sat Aug 19, 2017 2:45 am


Internet Protocol, Transport Control Protocol, Network protocols, Routing, Routers, IP aliases, Routes, Ethernet

Author Message
mabra
Post  Post subject: Understanding pcap-filter/tcpdumps 'localnet' background  |  Posted: Thu Oct 01, 2015 3:10 pm

Joined: Thu Oct 01, 2015 2:53 pm
Posts: 1

Offline
 

Understanding pcap-filter/tcpdumps 'localnet' background

Hello !
In all tcpdump docs, one can find this - or a similar - line:

Quote:
To select traffic neither sourced from nor destined for local hosts (if you gateway to one other net, this stuff should never make it onto your local net).

ip and not net localnet



I really needed some time to find out, that the mentioned 'localnet' must be in '/etc/networks' - which was not the case for me, wether for my debian squeeze nor for my ubunto 12. I added it - but, ether I dont understand or something does not work.

I see all traffic from and to the local box comin/going to other computer.

If I use instead
Quote:
ip and (not net 192.168.26.0/24)


If someone could this explain, this woul me make a little happier ;-)
I need it that often. Excluding the localhost by its name works.

Thanks anyway and
best reagrds,

Manfred





Top
Display posts from previous:  Sort by  
E-mail friendPrint view
Who is online
Users browsing this forum: No registered users and 0 guests
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum
Jump to:  
News News Site map Site map SitemapIndex SitemapIndex RSS Feed RSS Feed Channel list Channel list


Delete all board cookies | The team | All times are UTC - 5 hours [ DST ]



phpBB SEO