Reply in-line :-

On Tue, Jan 27, 2009 at 02:30, steve steve@lonetwin.net wrote:

<snip>

If you really want to get to the bottom of this, I'd suggest running tcpdump (normally, i use the options tcpdump -s0 -w <output>.cap host <youripaddress>) and then reading the capture file using wireshark, both with kget and with wget.

<snip>

Hi Steve, sorry for jumping on the thread. I am on kernel 2.6.27 and there is a big possibility I haven't really understood your command.

You gave

tcpdump -s0 -w <output>.cap host <youripaddress>

I used :-

tcpdump -s0 -w output.cap host 59.95.28.28

(ouput.cap most probably is a file-name and the IP Address is the IP Address being assigned by my provider)

but both for this I get

tcpdump: no suitable device found

Doing a cursory look at dmesg came across this .

[37479.042325] tcpdump uses obsolete (PF_INET,SOCK_PACKET)

My ifconfig.

$ ifconfig eth0 Link encap:Ethernet HWaddr 00:07:95:44:10:db UP BROADCAST MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) Interrupt:18 Base address:0xc800

eth1 Link encap:Ethernet HWaddr 00:08:a1:92:56:33 inet addr:192.168.1.3 Bcast:192.168.1.255 Mask:255.255.255.0 inet6 addr: fe80::208:a1ff:fe92:5633/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:1990826 errors:0 dropped:0 overruns:0 frame:0 TX packets:2204997 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:1271599953 (1.2 GB) TX bytes:537487624 (537.4 MB) Interrupt:22 Base address:0xcc00

lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:556 errors:0 dropped:0 overruns:0 frame:0 TX packets:556 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:50924 (50.9 KB) TX bytes:50924 (50.9 KB)

As can be seen the active connection here is eth1.

The connection is between ethernet card and router.

regards,

• steve