Re: [Ipsec-tools-devel] How to watch the contents of ESP packets?

[Brian C. <B.C...@po...>]

On Wed, Nov 22, 2006 at 03:43:33PM +0100, Eduard GV wrote:
> >> Yes, I tried that syntax (and different combinations) but I always got
> >> a syntax error.
> >
> >I never get a syntax error, even with junk:
> >
> >root@candlerb-desktop:~# tcpdump -i eth0 -n -s0 -E flurble123
> >tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
> >listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes
> >
> >So, are you sure your version of tcpdump was built with -E support?
> 
> I installed the latest stable versions from sources (and compiled with
> -lcrypto without errors). Is anything still missing?
> tcpdump -V
> tcpdump version 3.9.5
> libpcap version 0.9.5
> Usage: tcpdump [-aAdDeflLnNOpqRStuUvxX] [-c count] [ -C file_size ]
>                [ -E algo:secret ] [ -F file ] [ -i interface ] [ -M secret ]
>                [ -r file ] [ -s snaplen ] [ -T type ] [ -w file ]
>                [ -W filecount ] [ -y datalinktype ] [ -Z user ]
>                [ expression ]

I don't know. You haven't shown the error you get when you try to use
tcpdump -E foo.