[tcpdump-workers] difference (in sequence number and ACK )in filtering and without filtering by tcpdump

Hi i run tcpdump while file(with 4MB size almost) is downloading with follow filter: *"tcpdump -w pcapfile1 'tcp and host ' "* then i apply filtering on pcapfile1: *"tcpdump -r pcapfile1 -w pcapfile2 'tcp[tcpflags]&(tcp-syn|tcp-fin|tcp-rst)!=0 ' "* then i pcapfile1 and pcapfile2 convert to text

[tcpdump-workers] subscribe to tcpdump-workers"why information fi filtered files is difference?"

Hi I have problem with tcpdump: i capture  tcp packet and write them to file without filter. when again i read this file and filter "syn or fin or rst" paccket in another file i find that the sequence number's field in this file different  with  sequence number (that their flags are syn, fin or

Re: [tcpdump-workers] git trees

> "Ken" == Ken Bantoft <[EMAIL PROTECTED]> writes: Ken> No objection to git - but for those of us with commit access, Ken> what's the correct git clone location? git+ssh://[EMAIL PROTECTED]/tcpdump/master/git/{libpcap,tcpdump} git-daemon at: git://bpf.tcpdump.org/{tcpdump,lib

Re: [tcpdump-workers] Linux input layer evdev capturing

Michael Richardson sandelman.ottawa.on.ca> writes: > > "Guy" == Guy Harris alum.mit.edu> writes: > Guy> The name evdev is, as far as I know, a Linuxism, so DLT_EVDEV > Guy> might suffice as a name, unless fill-in-the-blankBSD or Solaris > Guy> or... ends up doing their own input l