standard tcpdump output doesnt appear to work about pcaphar HOT 5 CLOSED

Thanks for reporting this issue. Could you please upload an example of your 
tcpdump files?

Hello

Yes, my apologies - I didnt provide many specifics other than 'theres a 
problem!'.

tcpdump is attached.

im running on a Centos 6.2 box - linux 2.6.32-71.el6.x86_64
tcpdump v4 - according to the rpm metadata:
Name        : tcpdump                      Relocations: (not relocatable)
Version     : 4.0.0                             Vendor: CentOS
Release     : 3.20090921gitdf3cb4.1.el6     Build Date: Fri 20 Aug 2010 
15:30:12 EST
Install Date: Mon 16 Jan 2012 04:09:17 EST      Build Host: 
c6b2.bsys.dev.centos.org
Group       : Applications/Internet         Source RPM: 
tcpdump-4.0.0-3.20090921gitdf3cb4.1.el6.src.rpm
Size        : 836539                           License: BSD with advertising
Signature   : RSA/8, Sun 03 Jul 2011 15:03:02 EST, Key ID 0946fca2c105b9de
Packager    : CentOS BuildSystem <http://bugs.centos.org>
URL         : http://www.tcpdump.org
Summary     : A network traffic monitoring tool



My tcpdump command was:

tcpdump -s 0 port http -i eth0  -w tcpdump.pcap

In the aforementioned capture I stopped httpd, ran tcpdump, started tcpdump, 
waited,  stopped httpd, stopped tcpdump, started httpd.

I was thinking maybe the issue was the pcap had missing data at the start...

Though the attached pcap didnt parse. :(

Another failed pcap output attached created by


host#  tcpdump -i eth0 tcp port 80 -w tcpdump.pcap


[root@studio01 tmp]# tcpdump -i eth0 tcp port 80 -w tcpdump.pcap^C
[root@studio01 tmp]# uname -a
Linux studio01.e2e.stg.realestate.com.au 2.6.32-279.5.2.el6.x86_64 #1 SMP Fri 
Aug 24 01:07:11 UTC 2012 x86_64 x86_64 x86_64 GNU/Linux
[root@studio01 tmp]# cat /etc/redhat-release 
CentOS release 6.3 (Final)
[root@studio01 tmp]# rpm -qi tcpdump
Name        : tcpdump                      Relocations: (not relocatable)
Version     : 4.0.0                             Vendor: CentOS
Release     : 3.20090921gitdf3cb4.2.el6     Build Date: Mon 26 Mar 2012 
23:56:48 EST
Install Date: Wed 12 Sep 2012 21:30:46 EST      Build Host: 
c6b6.bsys.dev.centos.org
Group       : Applications/Internet         Source RPM: 
tcpdump-4.0.0-3.20090921gitdf3cb4.2.el6.src.rpm
Size        : 832443                           License: BSD with advertising
Signature   : RSA/SHA1, Tue 27 Mar 2012 00:32:34 EST, Key ID 0946fca2c105b9de
Packager    : CentOS BuildSystem <http://bugs.centos.org>
URL         : http://www.tcpdump.org
Summary     : A network traffic monitoring tool
Description :
Tcpdump is a command-line tool for monitoring network traffic.
Tcpdump can capture and display the packet headers on a particular
network interface or on all interfaces.  Tcpdump can display all of
the packet headers, or just the ones that match particular criteria.

Install tcpdump if you need a program to monitor network traffic.



Attached

Thanks for your patience. This should have been fixed. Please report back if 
you still experience issues.