Re: [tcpdump-workers] Filter on offline pcap

2005-08-07 Thread cycl0ne dude
, cycl0ne dude <[EMAIL PROTECTED]> wrote: > thank you very much > > -cycl0ne > > On 8/5/05, Guy Harris <[EMAIL PROTECTED]> wrote: > > cycl0ne dude wrote: > > > > > what i know is, filter only works in filtering traffic on interface > > > only, b

Re: [tcpdump-workers] Filter on offline pcap

2005-08-05 Thread cycl0ne dude
thank you very much -cycl0ne On 8/5/05, Guy Harris <[EMAIL PROTECTED]> wrote: > cycl0ne dude wrote: > > > what i know is, filter only works in filtering traffic on interface > > only, but how about on offline pcap file? > > pcap_setfilter() works on a

[tcpdump-workers] Filter on offline pcap

2005-08-04 Thread cycl0ne dude
hi list, is it possible to filter offline pcap file? its kinda like: noob.exe -r input-big.cap -w smtp-only.cap where is a bpf to filter out all SMTP packets from offline pcap file "input-big.cap", and save all the filtered packets to "smtp-only.cap" file? what i know is, filter only works in f