Re: [tcpdump-workers] PCAP Port range filtering

2005-03-31 Thread Guy Harris
On Mar 31, 2005, at 7:20 AM, Gabriel wrote: Hello, I tried using tcpdump -xs 1500 -i eth0 "tcp[2:2]>=1000 and tcp[2:2]<=2000" but it doesn't capture anything. When I tried tcpdump -xs 1500 -i eth0 tcp[2:2]=1500 it worked out fine (it captured everything with the dst port 1500). I'm using linux with

Re: [tcpdump-workers] PCAP Port range filtering

2005-03-31 Thread Gabriel
At 04:42 PM 12/11/2001 +0100, [EMAIL PROTECTED] wrote: > > I would like to know if it is possible to filter with PCAP on a range of > > ports by using "pcap_compile" function. > > > > I tried several filter expressions but each one was rejected by the > > function : > > > > Examples of expression