Re: [tcpdump-workers] BPF filter for tcp syn for ipv6

2010-02-11 Thread Richard Bejtlich
On Thu, Feb 11, 2010 at 10:24 AM, Ritesh Rekhi wrote: > Hi all, > > I want to filter TCp syn packet which is coming using IPv6 addresses. I am > not able to find the bpf filter for that can somebody help me to find the > right BPF filter > > > I have already tried" tcp[tcpflags] & (tcp-syn) != 0

Re: [tcpdump-workers] BPF ADVANCED FILTERS

2007-02-02 Thread Richard Bejtlich
On 2/2/07, Adelmo Silva <[EMAIL PROTECTED]> wrote: Does somebody know if it's possible to make a filter BPF to separate the packets that has a keyword into the payload? How to do it? Have you looked at http://ngrep.sourceforge.net/ or http://monkey.org/~jose/software/flowgrep/ ? Sincerel