Help with tcpdump query

[Dan Track]

On 10/13/06, T. Horsnell <tsh at mrc-lmb.cam.ac.uk> wrote:
> >Hi
> >
> >Could someone please point out to me where I'm going wrong with the following:
> >
> >tcpdump -i eth0  not port 22 and not port 53 not ip proto icmp
> >
>
> According to my man pages, you need to escape the icmp keyword thus (for C-shell)
>
> tcpdump -i eth0  not port 22 and not port 53 not ip proto \\icmp
>
> It works for me.
>
> To avoid the unresolvable ip addr, either aviod DSN lookups altogether
> with -n , or include 'and not host xxx' where xxx is the ip address
> you want to skip:
>
> tcpdump -i eth0  not port 22 and not port 53 and not host xxx and not ip proto \\icmp
>
> Cheers,
> Terry.
>
>
> >Additionally there's a client popping up that doesn't havea resolvable
> >hostname how can I exclude it with tcpdump?
> >
> >Thanks in advance
> >Dan


Hi

Thanks for the reply unforutnately I'm still getting the unresolvable error:

tcpdump -n -i eth0  not port 22 and not port 53 and not host
a72-246-55-1.deploy.akamaitechnologies.com and not ip proto \\icmp

tcpdump: unknown host 'a72-246-55-1.deploy.akamaitechnologies.com'

Any ideas?

Thanks
Dan