Re: [tcpdump-workers] PCAP Port range filtering

2005-04-01 Thread Guy Harris
On Apr 1, 2005, at 2:56 AM, Gabriel wrote: Yes, it works when I use the -O option. Thanks. So it's probably an optimizer bug, and... The output of the first one is: - [EMAIL PROTECTED]:~> sudo tcpdump -d -i eth0 "tcp[2:2]>=1000 and tcp[2:2]<=2000" (000) ldh [12] (001) jeq #0x800

Re: [tcpdump-workers] PCAP Port range filtering

2005-04-01 Thread Gabriel
--- Guy Harris <[EMAIL PROTECTED]> wrote: > > On Mar 31, 2005, at 7:20 AM, Gabriel wrote: > > > Hello, I tried using tcpdump -xs 1500 -i eth0 > > "tcp[2:2]>=1000 and tcp[2:2]<=2000" but it doesn't > > capture anything. When I tried tcpdump -xs 1500 -i > > eth0 tcp[2:2]=1500 it worked out fine (i