Re: [tcpdump-workers] I've a question about capture result, please help.

yeah... It's exactly what I want... I should have checked the man page more carefully... Thanks! On Fri, Apr 1, 2011 at 2:18 PM, Sake Blok wrote: > On 1 apr 2011, at 03:49, Benimaur Gao wrote: > >> The info in this one is quite little!! without request parameter, >> wi

Re: [tcpdump-workers] I've a question about capture result, please

yes, I neglected the crucial '-s' parameter... thank you! On Fri, Apr 1, 2011 at 1:10 PM, Darren Reed wrote: > Benimaur Gao wrote: >> >> Dear all, >> I tried to capture http traffic by the following command: >> # tcpdump -Ani eth1 'host 10.20.156.9 an

[tcpdump-workers] I've a question about capture result, please help.

Dear all, I tried to capture http traffic by the following command: # tcpdump -Ani eth1 'host 10.20.156.9 and tcp port 9003 and (((ip[2:2] - ((ip[0]&0xf)<<2)) - ((tcp[12]&0xf0)>>2)) != 0)' (the web application didn't not serve at the conventional 80 port) but different results was give