Re: [tcpdump-workers] Filter on offline pcap

2005-08-05 Thread cycl0ne dude
thank you very much -cycl0ne On 8/5/05, Guy Harris <[EMAIL PROTECTED]> wrote: > cycl0ne dude wrote: > > > what i know is, filter only works in filtering traffic on interface > > only, but how about on offline pcap file? > > pcap_setfilter() works on a pcap_t that you've opened with > pcap_open_

Re: [tcpdump-workers] Filter on offline pcap

2005-08-05 Thread Guy Harris
cycl0ne dude wrote: what i know is, filter only works in filtering traffic on interface only, but how about on offline pcap file? pcap_setfilter() works on a pcap_t that you've opened with pcap_open_offline() the same way it works on a pcap_t you've opened with pcap_open_live(). - This is t