"((tcp[0:2] >= 10) && (tcp[0:2] < 120)) || ((tcp[2:2] >= 10) && (tcp[2:2] < 120))"
On Sat, Jan 10, 2009 at 5:36 AM, Steve Laurie <[email protected]> wrote: > Hi all, > > I'm trying to find out if tcpdump can be used to listen on a particular > port range (ports 10 to 120 TCP inclusive to be specific) but can't seem > to get it to work. I'm sure I've used it like this in the past but I've > read the man page, searched the Internet and experimented with countless > combinations like 10-120, { 10:120 } etc. to no avail. > > Am I remembering incorrectly? Is tcpdump incapable of reporting on a > port range? > > TIA, > -- > Steve Laurie > > -- GDB has a 'break' feature; why doesn't it have 'fix' too?

