# dump files, loopback

**URL:** <https://community.zeek.org/t/dump-files-loopback/119>\
**Category:** Zeek\
**Created:** [February 2, 2001, 3:35pm UTC](https://community.zeek.org/t/dump-files-loopback/119 "2001-02-02T15:35:02Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Anderssen\_Magnus](https://avatars.discourse-cdn.com/v4/letter/a/977dab/32.png) [@Anderssen\_Magnus](https://community.zeek.org/u/Anderssen_Magnus)\
**Post date:** [February 2, 2001, 3:35pm UTC](https://community.zeek.org/t/dump-files-loopback/119/1 "2001-02-02T15:35:02Z")

</div>

Hi again,

&nbsp;&nbsp;I've installed Bro on a machine with freeBSD4.2 ( libpcap0.5). Since  
I cannot connect the machine on the network where I am now, I would like  
test my policy. I've tried to start bro on the localhost interface. I am  
only using the standard conn.bro file modified a little bit : the only  
processing of event I do is to write the name of the event function. I works  
with bro\_init(). But nothing is logged ( I am not using the log module so it  
shoult appear in my terminal), but tcpdump 'sees' the traffic (telnet and  
ftp on localhost).  
&nbsp;&nbsp;I've also tried to read from a dump file of tcpdump (tcpdump -i lo0  
-w filename), but I get this kind of output :  
&nbsp;&nbsp;...  
&nbsp;&nbsp;weird: 981105864.406810 bad\_IP\_cheksum  
&nbsp;&nbsp;...  
I've tried to read the file with tcpdump (-r filename) and it works. So I  
thought that maybe my localhost device does not format the packets correctly  
and tried to read a dump from another machine. But even tcpdump won't read  
these files (comming from a linux box).

Do somebody have a raw dump for to try or even better a solution to my  
problem(s).

Thanks,

Magnus.

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:36pm UTC](https://community.zeek.org/t/dump-files-loopback/119/2 "2022-05-06T15:36:14Z")

</div>


