Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!know!samsung!usc!ucsd!helios.ee.lbl.gov!horse.ee.lbl.gov!mccanne
From: mccanne@horse.ee.lbl.gov (Steven McCanne)
Newsgroups: comp.protocols.tcp-ip
Subject: Re: tcpdump
Message-ID: <6356@helios.ee.lbl.gov>
Date: 3 Aug 90 19:29:21 GMT
References: <1990Aug1.094815.9462@uniwa.uwa.oz>
Sender: usenet@helios.ee.lbl.gov
Reply-To: mccanne@horse.ee.lbl.gov (Steven McCanne)
Distribution: comp
Organization: Lawrence Berkeley Laboratory, Berkeley
Lines: 13
X-Local-Date: 3 Aug 90 12:29:21 PDT

In article <1990Aug1.094815.9462@uniwa.uwa.oz> toivo@uniwa.uwa.oz (Toivo Pedaste) writes:
>I'm runing tcpdump on a sun3 with sunos4. It seem to work fine apart
>from no showing DNS (port domain) request packets. 

This probably was due to a bug that we've fixed for the next release.
If a protocol appeared twice in /etc/services, tcpdump would just pick
the first one (i.e. 'domain 53/tcp' and 'domain 53/udp').

In the meantime, saying 'port 53' should work.  

Also, using '-d' might shed some light on what went wrong.

Steve