tcpdump strange udp line

Asked Aug 31 '11 at 13:00

Active Aug 31 '11 at 13:00

Viewed 173 times

I've found a strange line in the tcpdump output. Normally UDP packets are dumped in the following form:

timestamp IP srcaddress.port > dstaddress.port: UDP, length packetlength

but this is just:

timestamp IP srcaddress > dstaddress: udp

note the missing port numbers, the lowercase udp and the missing packet length.

Does somebody know what's this?

asked Aug 31 '11 at 13:00

Karoly Horvath

Just `udp`, not `[|udp]`? What does `tcpdump -h` print? – Apr 30 '15 at 19:43
@GuyHarris: as you can see this was a long time ago.. not even sure how to reproduce it in a different environment.. – Karoly Horvath May 01 '15 at 10:01

0 Answers0