Guy Harris ha scritto:
Nicolao Renè wrote:
Hello, I'm using libpcap 0.8 on FreeBSD 5.4, is it possible in some
way to reset the pcap stats?
If you mean "in an application using libpcap, which calls pcap_stats()
before it stops capturing, is there any way to reset the statistics
Hello, I'm using libpcap 0.8 on FreeBSD 5.4, is it possible in some way
to reset the pcap stats?
Thank you in advance,
Nicolao Renè.
-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.
Hi, I'm having some problems with long filter expressions passed to
pcap_compile,
with the following string I get "pcap_compile: syntax error"
(tcp and (src net 10.10.0.0/16) and (dst net 10.10.0.0/16) and (tcp[0:2]
>= 1 and tcp[0:2] <= 1024) and (tcp[2:2] >= 1 and tcp[2:2] <= 1024) and
(ip[2:2
Guy Harris wrote:
Nicolao Renè wrote:
Hi, I've a problem with tcpdump when I try to specify a port range
if I use a filter expr like: tcpdump -i eth0 '(tcp and (tcp[0:2]
>=1) and (tcp[0:2] <= 2))'
which means, capture all tcp packets with source port between 1
Hi, I've a problem with tcpdump when I try to specify a port range
if I use a filter expr like: tcpdump -i eth0 '(tcp and (tcp[0:2]
>=1) and (tcp[0:2] <= 2))'
which means, capture all tcp packets with source port between 1 and
2, I get no result from tcpdump.
When I use a filter lik