tcpdump crash server

[echong]

Does anyone have problem running tcpdump on HP-UX 11.00? It happened to me twice that the server hung while running tcpdump. We are running tcpdump 3.6.2 binary downloaded from hpux.cs.utah.edu. The command I used is:

tcpdump -c 1000 -s 200 -w filename port 162

This is a network management box running NNM with heavy SNMP traffic. I was trying to gather some information about the reciving traps. There were 3 NICs but only one is configured. Does my -s option causing problem? Are there patches that I need to install?

[Brian Hackley]

Eric,

When you said that tcpdump "hung the server" its not clear exactly what happened. Did you have to reboot the server, reset it, or get a TOC dump? Did it panic? Check /etc/shutdownlog for those clues.
HPUX 11.0 and 11.11 you must install the latest ARPA Transport patch to fix some significant bugs with corruption when LAN is in promiscuous mode. PHNE_26771 (11.0) PHNE_25644 (11.11).

If you need help analyzing the panic crashdump, please post a new message with the particulars.

Hope this helps,

-> Brian Hackley