On Wed, 11 Aug 2004, Mark Nellemann - Privat wrote:
> 
> After connecting to my monowall with the linux pptp client, I ran tcpdump:
> 
> waylander:~# tcpdump -w pptp.cap -s 1536 -i ppp0 ip proto 47
> tcpdump: listening on ppp0, link-type LINUX_SLL (Linux cooked), capture 
> size 1536 bytes
> ''0 packets captured
> 0 packets received by filter
> 0 packets dropped by kernel
> 
> 
> Am I typing something wrong?

Yes, I should have been more explicit.  You need to capture on the
Ethernet interface underlying the PPTP tunnel (probably the LAN), not the
virtual PPP interface.

					Fred Wright