it is parsed on each layer of the headers
or used once after the packet is parsed completely?
Is there some material about this?
Regards,
Wenfei Wu
___
tcpdump-workers mailing list
tcpdump-workers@lists.tcpdump.org
https://lists.sandelman.ca/mailman
Thanks, this is really helpful.
On Tue, Jan 29, 2013 at 3:21 PM, Guy Harris wrote:
> er, so you can't check the TCP ports in tho
___
tcpdump-workers mailing list
tcpdump-workers@lists.tcpdump.org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-worke