summaryrefslogtreecommitdiff
path: root/sbin
diff options
context:
space:
mode:
authorTheo de Raadt <deraadt@cvs.openbsd.org>2001-08-22 16:15:01 +0000
committerTheo de Raadt <deraadt@cvs.openbsd.org>2001-08-22 16:15:01 +0000
commit162807ded75ef98cea12740164f48580d7587789 (patch)
treebfeac91eb82b521388d8c183630ac7c12e154527 /sbin
parent6a9c746ebaec9cf302127fcb4db0734d5b9ef7e4 (diff)
clarify tcpdump use; frantzen
Diffstat (limited to 'sbin')
-rw-r--r--sbin/pflogd/pflogd.85
1 files changed, 4 insertions, 1 deletions
diff --git a/sbin/pflogd/pflogd.8 b/sbin/pflogd/pflogd.8
index 83e1fa30f92..a39bd778258 100644
--- a/sbin/pflogd/pflogd.8
+++ b/sbin/pflogd/pflogd.8
@@ -1,4 +1,4 @@
-.\" $OpenBSD: pflogd.8,v 1.1 2001/08/21 22:29:14 deraadt Exp $
+.\" $OpenBSD: pflogd.8,v 1.2 2001/08/22 16:15:00 deraadt Exp $
.\"
.\" Copyright (c) 2001 Can Erkin Acar. All rights reserved.
.\"
@@ -52,6 +52,8 @@ binary format.
These logs can be reviewed later using the
.Ar -r
option of
+.Xr tcpdump 8 , hopefully offline in case there are bugs in the packet
+parsing code of
.Xr tcpdump 8 .
.Pp
.Nm
@@ -93,6 +95,7 @@ Analyze at most the first
bytes of data from each packet rather than the default of 96.
The default of 96 is adequate for IP, ICMP, TCP, and UDP headers but may
truncate protocol information for other protocols.
+Other file parsers may desire a higher snaplen.
.It Ar expression
selects which packets will be dumped, using the regular language of
.Xr tcpdump 8 .