On Mar 31, 2005, at 7:20 AM, Gabriel wrote:
Hello, I tried using tcpdump -xs 1500 -i eth0
"tcp[2:2]>=1000 and tcp[2:2]<=2000" but it doesn't
capture anything. When I tried tcpdump -xs 1500 -i
eth0 tcp[2:2]=1500 it worked out fine (it captured
everything with the dst port 1500). I'm using linux
with
At 04:42 PM 12/11/2001 +0100, [EMAIL PROTECTED] wrote:
> > I would like to know if it is possible to filter
with PCAP on a range of
> > ports by using "pcap_compile" function.
> >
> > I tried several filter expressions but each one
was rejected by the
> > function :
> >
> > Examples of expression