apollostees
DD-WRT Novice
Joined: 18 Apr 2017
Posts: 1
|
 Posted: Tue Apr 18, 2017 20:10 Post subject: Can't save packet captures? |
 |
Whats up DD WRT forum,
I'm having weirdest issue with the native tcpdump install, included with my firmware.
Here's what happens:
1. If I specify a specific host, (using syntax: tcpdump -i X '(host 192.168.1.x)' -w test.pcap) then I'm unable to write my capture.
I get a "tcpdump: syntax error".
| Code: | root@SDIWireless_KeepOut2:/tmp/var/tmp# tcpdump -i br0 '(host 192.168.1.100)' -w test.pcap
tcpdump: syntax error |
2. If I specify a specific host, (using syntax: tcpdump -i X '(host 192.168.1.x)' test.pcap)and print to the screen only this works fine.
| Code: | root@SDIWireless_KeepOut2:/tmp/var/tmp# tcpdump -i br0 '(host 192.168.1.100)'
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on br0, link-type EN10MB (Ethernet), capture size 65535 bytes
15:31:49.660934 IP android-52b59112000a20de.49354 > ya-in-f95.1e100.net.443: UDP, length 23
15:31:49.666164 IP android-52b59112000a20de.49354 > ya-in-f95.1e100.net.443: UDP, length 23
15:31:49.669889 IP ya-in-f95.1e100.net.443 > android-52b59112000a20de.49354: UDP, length 36
15:31:50.356885 IP android-52b59112000a20de.11118 > DD-WRT.53: 8849+ A? googleads.g.doubleclick.net. (45)
15:31:50.399058 IP DD-WRT.53 > android-52b59112000a20de.11118: 8849 5/4/4 CNAME pagead46.l.doubleclick.net., A 74.125.21.157, A 74.125.21.156, A 74.125.21.155, A 74.125.21.154 (280) |
3. If I do not specify a host, (using syntax: tcpdump -i X -w test.pcap) this works fine.
| Code: | root@SDIWireless_KeepOut2:/tmp/var/tmp# tcpdump -i br0 -w test.pcap
tcpdump: listening on br0, link-type EN10MB (Ethernet), capture size 65535 bytes
^Z[2]+ Stopped tcpdump -i br0 -w test.pcap |
Heres what I'm using:
Device linksys wrt1900ac
firmware DD WRT v3.0-r31722 std (03/21/17)
Kernel Linux 3.18.48 #115 SMP Fri Mar 17 01:49:29 CET 2017 armv7l
tcpdump version 4.5.1
libpcap version 1.7.2
Is this a known issue? Is there a work around?
Can I install a different version of tcpdump? |
|
