|
On Thu, Aug 09, 2001 at 07:37:48PM -0700, Peter Mueller wrote:
> > tcpdump -p -i eth0 -n 'tcp[13] == 2' and dst port 80 and dst
> > host 192.168.7.1
> >
> > Where:
> > -p: Turn off promiscuous mode. You shouldn't need promiscous mode
> > as the packets are coming into the machine anyway.
> > tcp[13] == 2: Match only packets that only have they SYN bit set.
> > eth0: The interface that your VIP is on.
> > 80: The port for your Virtual Service
> > 192.168.7.1: The VIP
> >
>
> cool. much better than nothing :)
>
> it filters pretty good, except it doubles each request.. (presumably because
> LVS just passes the packets on again?) .. I tried filtering further with
> 'and outbound' or 'and inbound', but both requests appear to indicate as
> outbound :(.
Ouch.
How about adding "and ether dst 00:10:A4:AB:2D:DE" where 00:10:A4:AB:2D:DE
is the MAC address of the interface the VIP is on. Does that help.
--
Horms
|
