Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I've found a strange line in the tcpdump output. Normally UDP packets are dumped in the following form:

timestamp IP srcaddress.port > dstaddress.port: UDP, length packetlength

but this is just:

timestamp IP srcaddress > dstaddress: udp

note the missing port numbers, the lowercase udp and the missing packet length.

Does somebody know what's this?

share|improve this question
    
Just udp, not [|udp]? What does tcpdump -h print? –  Guy Harris Apr 30 at 19:43
    
@GuyHarris: as you can see this was a long time ago.. not even sure how to reproduce it in a different environment.. –  Karoly Horvath May 1 at 10:01

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.