tcpdump filter not functioning correctly with igb on FreeBSD 11.1

Tue Feb 6 21:48:37 UTC 2018

On mar.  6 févr. 21:03:12 2018, David Athay wrote:
> I was originally using 11.1-RELEASE but I have since updated to 11-STABLE. Weirdness still persists
> 
> $ tcpdump --version
> tcpdump version 4.9.2
> libpcap version 1.8.1
> OpenSSL 1.0.2n-freebsd  7 Dec 2017
> 
> $ uname -aUK
> FreeBSD s5.pkfm.banes 11.1-STABLE FreeBSD 11.1-STABLE #2 r328930: Tue Feb  6 16:05:59 GMT 2018     root at s5.pkfm.banes:/usr/obj/usr/src/sys/TRUESPEED  amd64 1101509 1101509

On an older tcpdump version (from pkg), I have the expected behaviour
here.
root at budic:~ # tcpdump -c 4 -i igb2 host conan.grif        
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on igb2, link-type EN10MB (Ethernet), capture size 262144 bytes
22:45:06.889186 IP conan.grif.37865 > budic.grif.snmp:  GetBulk(29)  N=0 M=10 interfaces.ifTable.ifEntry.ifOutErrors
22:45:06.890378 IP budic.grif.snmp > conan.grif.37865:  GetResponse(185)  interfaces.ifTable.ifEntry.ifOutErrors.1=0 interfaces.ifTable.ifEntry.ifOutErrors.2=0 interfaces.ifTable.ifEntry.ifOutErrors.3=0 interfaces.ifTable.ifEntry.ifOutErrors.4=0 interfaces.ifTable.ifEntry.ifOutErrors.5=3 interfaces.ifTable.ifEntry.ifOutErrors.6=3 interfaces.ifTable.ifEntry.ifOutErrors.7=2 interfaces.ifTable.ifEntry.ifOutErrors.8=7 interfaces.ifTable.ifEntry.ifOutErrors.9=5 interfaces.ifTable.ifEntry.ifOutErrors.10=5
22:45:06.892503 IP conan.grif.37865 > budic.grif.snmp:  GetBulk(30)  N=0 M=10 interfaces.ifTable.ifEntry.ifOutErrors.10
22:45:06.893577 IP budic.grif.snmp > conan.grif.37865:  GetResponse(185)  interfaces.ifTable.ifEntry.ifOutErrors.11=3 interfaces.ifTable.ifEntry.ifOutErrors.12=2 interfaces.ifTable.ifEntry.ifOutErrors.13=2 interfaces.ifTable.ifEntry.ifOutErrors.14=3 interfaces.ifTable.ifEntry.ifOutErrors.15=1 interfaces.ifTable.ifEntry.ifOutErrors.16=0 interfaces.ifTable.ifEntry.ifOutQLen.1=0 interfaces.ifTable.ifEntry.ifOutQLen.2=0 interfaces.ifTable.ifEntry.ifOutQLen.3=0 interfaces.ifTable.ifEntry.ifOutQLen.4=0
4 packets captured                                         
5 packets received by filter                               
0 packets dropped by kernel                                
root at budic:~ # tcpdump -c 4 -i igb2 not host conan.grif    
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on igb2, link-type EN10MB (Ethernet), capture size 262144 bytes
22:45:15.139058 IP guerech.grif.5404 > 239.192.26.70.5405: UDP, length 136
22:45:15.442807 IP guerech.grif.5404 > 239.192.26.70.5405: UDP, length 136
22:45:15.506901 ARP, Request who-has 172.17.0.28 tell berthe.grif, length 46
22:45:15.746589 IP guerech.grif.5404 > 239.192.26.70.5405: UDP, length 136
4 packets captured                                         
16 packets received by filter
0 packets dropped by kernel       
root at budic:~ # tcpdump --version
tcpdump version 4.9.0
libpcap version 1.8.1
OpenSSL 1.0.2k-freebsd  26 Jan 2017
root at budic:~ # uname -aUK
FreeBSD budic.cogent-rns.grifon.fr 11.1-RELEASE FreeBSD 11.1-RELEASE #0 r321309: Fri Jul 21 02:08:28 UTC 2017     root at releng2.nyi.freebsd.org:/usr/obj/usr/src/sys/GENERIC  amd64 1101001 1101001

-- 
alarig
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-net/attachments/20180206/dc6827ce/attachment.sig>