Re: [tcpdump-workers] Printing of TCP flags seems incorrect

On Jul 1, 2008, at 4:32 PM, grarpamp wrote: Hi. Surely it is not possible to have both 'no flags' and present at the same time? The man page has a few references to the dot, particularly in the 'OUTPUT FORMAT - TCP Packets' example near 'means no flags'. The man page apparently needs to be u

[tcpdump-workers] Printing of TCP flags seems incorrect

Hi. Surely it is not possible to have both 'no flags' and present at the same time? The man page has a few references to the dot, particularly in the 'OUTPUT FORMAT - TCP Packets' example near 'means no flags'. #CVS, the most recent commit I have is: 20080624 #tcpdump version 3.9-PRE-CVS_2008_06

Re: [tcpdump-workers] inquiry on variable insertion on tcpdump code

Ignacio, Domingo Jr Ostria - igndo001 wrote: I inserted a new variable, srtt, into the print_tcp.h header file and tcp.c source code. (Presumably you meant "tcp.h header file and print-tcp.c source code".) If you inserted it into the "struct tcphdr" structure, that's a mistake. That stru

[tcpdump-workers] tcpdump -E decryption question

Hi, theres no "user" list but i hope i can post here too. Searching the archives i found this: http://www.tcpdump.org/lists/workers/2003/09/msg00011.html 192.1.2.23 > 192.1.2.45: ESP(spi=0x12345678,seq=0x1): 192.0.2.1 > 192.0.1.1: icmp: echo request (DF) (ipip-proto-4) This should be the output

[tcpdump-workers] Article about libpcap

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, A few months ago I wrote an article about libpcap for a magazine called Hakin9. Today I have received permission to distribute the article so now it is available for everyone. I have linked it from section "Documentation", in tcpdump web site.