16:01:20.749086 208.179.0.193.1713112737 > 208.179.0.198.2049: 116 read [|nfs] (DF) (ttl 64, id 0)
16:01:20.766166 208.179.0.198 > 208.179.0.193: (frag 65235:1292@2912) (ttl 63)
16:01:20.770949 208.179.0.198 > 208.179.0.193: (frag 65235:1456@1456+) (ttl 63)
16:01:20.786135 208.179.0.198.2049 > 208.179.0.193.1713112737: reply ok 1448 read [|nfs] (frag 65235:1456@0+) (ttl 63)
16:01:20.786600 208.179.0.193.1729889953 > 208.179.0.198.2049: 116 read [|nfs] (DF) (ttl 64, id 0)
16:01:20.806097 208.179.0.198 > 208.179.0.193: (frag 65236:1292@2912) (ttl 63)
16:01:20.824985 208.179.0.198 > 208.179.0.193: (frag 65236:1456@1456+) (ttl 63)
16:01:20.828180 208.179.0.198.2049 > 208.179.0.193.1729889953: reply ok 1448 read [|nfs] (frag 65236:1456@0+) (ttl 63)
16:01:21.490561 208.179.0.193.1746667169 > 208.179.0.198.2049: 176 lookup [|nfs] (DF) (ttl 64, id 0)
16:01:21.507307 208.179.0.198.2049 > 208.179.0.193.1746667169: reply ok 28 lookup [|nfs] (ttl 63, id 65242)
hmm. nifty port numbers there. i'm going to go on a wild guess and say
tcpdump is broken? where can i get a usable copy of tcpdump source as this
is supposedly 'the right stuff'
# uname -a
Linux nifty 2.3.42 #1 Tue Feb 1 20:38:15 PST 2000 i686 unknown
# tcpdump -V
tcpdump version 3.4
libpcap version 0.4
-d
-- Open for Y2K - Linux, we never shutdown- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
This archive was generated by hypermail 2b29 : Mon Feb 07 2000 - 21:00:10 EST