tcpdump command

Asked by aneesh

output of "tcpdump" command is

root@sics-desktop:~# tcpdump -c 10
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
15:40:01.467971 STP 802.1d, Config, Flags [none], bridge-id 8000.00:12:cf:85:59:60.8013, length 43
15:40:01.470496 arp who-has 10.10.198.201 tell 10.10.1.250
15:40:01.508473 IP sics-desktop.local.53283 > mail.keltron.co.in.domain: 56105+ PTR? 201.198.10.10.in-addr.arpa. (44)
15:40:01.538228 IP user-desktop.local.ipp > 10.10.1.255.ipp: UDP, length 173
15:40:01.570203 arp who-has 10.10.63.154 tell 10.10.0.1
15:40:01.570239 arp who-has 10.10.190.52 tell 10.10.1.250
15:40:01.750213 arp who-has 10.10.149.212 tell 10.10.1.250
15:40:01.754824 IP 10.10.1.254 > VRRP.MCAST.NET: VRRPv2, Advertisement, vrid 1, prio 255, authtype none, intvl 1s, length 20
15:40:01.811678 IPX 00000000.00:08:a1:83:ae:7c.0453 > 00000000.ff:ff:ff:ff:ff:ff.0453: ipx-rip-resp 2451780547/1.2
15:40:01.853158 IP 10.10.0.93.netbios-ns > 10.10.1.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
10 packets captured
3101 packets received by filter
2731 packets dropped by kernel

what is the meaning of above output line " 15:40:01.570203 arp who-has 10.10.63.154 tell 10.10.0.1" where 10.10.63.154 is not my network ip and no route to this network

Question information

Language:
English Edit question
Status:
Answered
For:
Ubuntu gnome-terminal Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:
Revision history for this message
bahaa2008 (bahaa2008) said :
#1

$ whatis tcpdump
tcpdump (8) - dump traffic on a network

this means that this output is the traffic in your network not from your Ethernet card only.

This packet specifically is an arp request where the gateway (10.10.0.1) is asking for mac address of the host (10.10.63.154)

i hope that i helped you :)

Can you help with this problem?

Provide an answer of your own, or ask aneesh for more information if necessary.

To post a message you must log in.