How to do tcpdump ?

[chaitanyalala]

How to do tcpdump ?

[sangjinhan]

For simple tapping for debugging, you don't need any special modules. Mirroring packets at a gate of any module is a built-in feature of BESS. In bessctl, you can try:

localhost:10514 $ tcpdump port_inc0 0 -ne | less

There are other approaches to do the same thing: e.g., while there is no module that mirrors packets and send them out to downstream modules, it should be simple to implement one (with a few lines of code). Then create such a mirror module and connect it to two downstream path. One is for usual packet processing and the other for inspection on mirrored packets (with UnixSocketPort you can export packets to an external program).

[chaitanyalala]

Thank you! Will try this and report back.