Re: [tcpdump-workers] match by tcp sequence number?

2007-07-16 Thread Mike Mohr
Jan, Thank you for your reply. In the meantime I have also discovered a great reference that you may or may not already know of: http://packet.node.to/hacks/byte_offsets.txt Of course you folks already know everything listed there, but for people like myself it is quite handy. Is there a way

[tcpdump-workers] match by tcp sequence number?

2007-07-14 Thread Mike Mohr
Hello, I'm trying to write a filter for a small pcap application. I need to match by the tcp sequence number, as I'm only interested in packets with sequence number 1. I know I can match by octet, using e.g. tcp[13] == ???, but the sequence field is 4 octets (32-bit). How can I match against t