user/1444: tcpdump

[fgsch@openbsd.org]

>Number:         1444
>Category:       user
>Synopsis:       tcpdump
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    bugs
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Fri Oct 13 02:20:02 MDT 2000
>Last-Modified:
>Originator:     Federico G. Schwindt
>Organization:
net
>Release:        -current
>Environment:
	System      : OpenBSD 2.8
	Architecture: OpenBSD.i386
	Machine     : i386
>Description:
	If a filter expression is used with tcpdump on a tun interface,
	no packets are dumped, whether or not they satisfy the expression.
	Also, if not is used (e.g. tcpdump not port domain) all packets are 
	dumped, including those from DNS.

	Not sure if this is a tcpdump, bpf or tun problem. Using filtering
	expressions with ep works fine, tho.
>How-To-Repeat:
	Eg. run 'tcpdump -i tun0 port' domain and make a DNS query.
>Fix:
	Unknown at the moment.

>Audit-Trail:
>Unformatted: