This is quite strange. Are these bpf? devices new to 1.3? I could swear
I've never seen them before...

David, I get the following error when doing the MAKEDEV...

[otaku@unixgeek.ml.org]% cd /dev ; ./MAKEDEV bpf0 bpf1 bfp2 bpf3
bfp2: unknown device

LOL! I see it now...you mistyped bpf :) Okay, it worked this time...

Okay, tcpdump gave me some INTERESTING output...

03:58:47.995112 otaku.users.netset.com.domain >
otaku.users.netset.com.3363: 5083 1/5/5 (311)
03:58:48.558471 otaku.users.netset.com.domain >
otaku.users.netset.com.3363: 5083 1/5/5 (311)
03:58:48.576362 ts2-ASCEND.cmh.netset.com > otaku.users.netset.com: icmp:
redirect otaku.users.netset.com
to host otaku.users.netset.com
03:58:48.598056 otaku.users.netset.com.3364 >
otaku.users.netset.com.domain: 5084+ (46)
03:58:48.825541 otaku.users.netset.com.3364 >
otaku.users.netset.com.domain: 5084+ (46)
03:58:48.848563 ts2-ASCEND.cmh.netset.com > otaku.users.netset.com: icmp:
redirect otaku.users.netset.com
to host otaku.users.netset.com
03:58:48.865273 otaku.users.netset.com.domain >
otaku.users.netset.com.3364: 5084 1/5/5 (309)
03:58:49.408103 otaku.users.netset.com.domain >
otaku.users.netset.com.3364: 5084 1/5/5 (309)
03:58:49.439949 ts2-ASCEND.cmh.netset.com > otaku.users.netset.com: icmp:
redirect otaku.users.netset.com
to host otaku.users.netset.com
03:58:49.530916 otaku.users.netset.com.3365 >
otaku.users.netset.com.domain: 5085+ (45)
03:58:49.706590 [|ip]
03:58:49.708539 [|ip]

It looked like it would've gone on an don with the packets from ts2*,
which appears to be one of my ISP's routers. Now, oddly enough, I am
running icmpwatcher, and the first day of my 1.3 install I got a 1.5mb log
of approximately 5000 ICMP requests very similar to those. WHY is my ISP's
router sending me ICMP packets? It's never done this before...

I suppose I should contact my ISP...huh?

Thanks...

On Mon, 5 Jan 1998, Colin Wood wrote:

> David Brownlee wrote:
> > 
> > On Mon, 5 Jan 1998, Josh Hope wrote:
> > 
> > > Yep! really. I did a tcpdump, but I bet you anything there's an arg I'm
> > > "supposed" to use...since I got this:
> > > 
> > > [otaku@unixgeek.ml.org]% tcpdump
> > > tcpdump: /dev/bpf0: No such file or directory
> > > 
> > 	This indicates a problem with the Berkeley packet filter
> > 	(/dev/bpf0)
> > 	As root try 'cd /dev ; ./MAKEDEV bpf0 bpf1 bfp2 bpf3'
> 
> Actually, since he was trying to watch ppp0, I think that this should
> work:
> 
> tcpdump -i ppp0
> 
> although the bpf* devices will probably have to exist first...
> 
> Later.
> 
> -- 
> Colin Wood                                 cwood@ichips.intel.com
> Component Design Engineer - MD6                 Intel Corporation
> -----------------------------------------------------------------
> I speak only on my own behalf, not for my employer.
> 

Josh Hope                                          root@unixgeek.ml.org
UNIX System Administrator                        http://unixgeek.ml.org
-----------------------------------------------------------------------
'Endless roll the waters past!                        - Lay of Leithian
To this my love hath come at last,                    - Lines 1220-1223
enchanted waters pitiless,                           By: J.R.R. Tolkien
a heartache and a loneliness.'