Re: [tcpdump-workers] match by tcp sequence number?

2007-07-14 Thread Jan C. Nordholz
Hi, > I'm trying to write a filter for a small pcap application. I need to > match by the tcp sequence number, as I'm only interested in packets > with sequence number 1. I know I can match by octet, using e.g. > tcp[13] == ???, but the sequence field is 4 octets (32-bit). How can > I match aga

[tcpdump-workers] match by tcp sequence number?

2007-07-14 Thread Mike Mohr
Hello, I'm trying to write a filter for a small pcap application. I need to match by the tcp sequence number, as I'm only interested in packets with sequence number 1. I know I can match by octet, using e.g. tcp[13] == ???, but the sequence field is 4 octets (32-bit). How can I match against t

Re: [tcpdump-workers] tcpdump <= 3.9.6 BGP dissector integer overflow

2007-07-14 Thread Guy Harris
Peter Volkov wrote: We received report on security issue in tcpdump: http://bugs.gentoo.org/184815 Could anybody review fix and comment and apply in CVS? Thanks. I reviewed the fix - it seemed a bit cleaner to have it continue processing the TLVs, without adding to the string, if the string