Re: [tcpdump-workers] How to reset pcap stats

2005-11-25 Thread Nicolao Renè
Guy Harris ha scritto: Nicolao Renè wrote: Hello, I'm using libpcap 0.8 on FreeBSD 5.4, is it possible in some way to reset the pcap stats? If you mean "in an application using libpcap, which calls pcap_stats() before it stops capturing, is there any way to reset the statistics

[tcpdump-workers] How to reset pcap stats

2005-11-25 Thread Nicolao Renè
Hello, I'm using libpcap 0.8 on FreeBSD 5.4, is it possible in some way to reset the pcap stats? Thank you in advance, Nicolao Renè. - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.

[tcpdump-workers] Problem with long filter expressions

2005-02-17 Thread Nicolao Renè
Hi, I'm having some problems with long filter expressions passed to pcap_compile, with the following string I get "pcap_compile: syntax error" (tcp and (src net 10.10.0.0/16) and (dst net 10.10.0.0/16) and (tcp[0:2] >= 1 and tcp[0:2] <= 1024) and (tcp[2:2] >= 1 and tcp[2:2] <= 1024) and (ip[2:2

Re: [tcpdump-workers] port range

2005-02-11 Thread Nicolao Renè
Guy Harris wrote: Nicolao Renè wrote: Hi, I've a problem with tcpdump when I try to specify a port range if I use a filter expr like: tcpdump -i eth0 '(tcp and (tcp[0:2] >=1) and (tcp[0:2] <= 2))' which means, capture all tcp packets with source port between 1

[tcpdump-workers] port range

2005-02-11 Thread Nicolao Renè
Hi, I've a problem with tcpdump when I try to specify a port range if I use a filter expr like: tcpdump -i eth0 '(tcp and (tcp[0:2] >=1) and (tcp[0:2] <= 2))' which means, capture all tcp packets with source port between 1 and 2, I get no result from tcpdump. When I use a filter lik