Re: [tcpdump-workers] Sniffing ranges of ips

2004-11-20 Thread Miguel Matos
On Sat, 20 Nov 2004 16:29:29 -0500, Jefferson Ogata <[EMAIL PROTECTED]> wrote: > MMatos wrote: > > Note: I'm resending this message because i've sent it 20 hours ago and > > it wasn't arrived to the list (at least i wasn't received it yet). > > I saw it yesterday. > > > > > Alexander Dupuy wro

Re: [tcpdump-workers] Sniffing ranges of ips

2004-11-20 Thread Jefferson Ogata
MMatos wrote: Note: I'm resending this message because i've sent it 20 hours ago and it wasn't arrived to the list (at least i wasn't received it yet). I saw it yesterday. Alexander Dupuy wrote: Jefferson Ogata wrote: Or you can do something more utilitarian, such as: tcpdump [options] '( ip[12:4

Re: [tcpdump-workers] Sniffing ranges of ips

2004-11-20 Thread MMatos
Note: I'm resending this message because i've sent it 20 hours ago and it wasn't arrived to the list (at least i wasn't received it yet). Alexander Dupuy wrote: Jefferson Ogata wrote: Or you can do something more utilitarian, such as: tcpdump [options] '( ip[12:4] >= 0xc0a8020f ) and ( ip[12:4]

Re: [tcpdump-workers] Sniffing ranges of ips

2004-11-19 Thread MMatos
Alexander Dupuy wrote: Jefferson Ogata wrote: Or you can do something more utilitarian, such as: tcpdump [options] '( ip[12:4] >= 0xc0a8020f ) and ( ip[12:4] <= 0xc0a80228 )' For some reason (subscription e-mail vs. sending e-mail) my previous messages on this topic seem not to have gone out to

Re: [tcpdump-workers] Sniffing ranges of ips

2004-11-19 Thread Alexander Dupuy
Guy Harris wrote: Try it with the top-of-tree CVS version; I've made some optimizer fixes that will, I think, fix this. I saw the commit messages. However, I'm unable to update my CVS version; as noted before, I get an abrupt server abort, and don't have other ideas on how to solve this: $ cvs -d

Re: [tcpdump-workers] Sniffing ranges of ips

2004-11-19 Thread Robert Lowe
MMatos wrote: tcpdump [options] '( ip[12:4] >= 0xc0a8020f ) and ( ip[12:4] <= 0xc0a80228 )' First of all thanks for the precious help you give me ! I' ve been analysing the scripts and they expand the ranges to all ips and then work around with the netmasks .. Indead i like the 2nd way you're s

Re: [tcpdump-workers] Sniffing ranges of ips

2004-11-19 Thread Jefferson Ogata
MMatos wrote: Jefferson Ogata wrote: Jefferson Ogata wrote: MMatos wrote: For example I want to dump all traffic that arrives to my box from ips 192.168.2.15 to 192.168.2.40 I could write all the ips in the range but that's not a good solution, so how can implement that filter correctly using the

Re: [tcpdump-workers] Sniffing ranges of ips

2004-11-19 Thread MMatos
Jefferson Ogata wrote: Jefferson Ogata wrote: MMatos wrote: I want to write a little program that analyses packets within a given ip range. My current problem is to set a filter that work with ip ranges. For example I want to dump all traffic that arrives to my box from ips 192.168.2.15 to 192.1

Re: [tcpdump-workers] Sniffing ranges of ips

2004-11-19 Thread Guy Harris
Alexander Dupuy wrote: Note also that there is a bug in the libpcap BPF optimizer (as of 0.8.3) that breaks the hack described above, Try it with the top-of-tree CVS version; I've made some optimizer fixes that will, I think, fix this. However, the libpcap 0.7 optimizer not only generates correc

Re: [tcpdump-workers] Sniffing ranges of ips

2004-11-19 Thread Alexander Dupuy
Jefferson Ogata wrote: Or you can do something more utilitarian, such as: tcpdump [options] '( ip[12:4] >= 0xc0a8020f ) and ( ip[12:4] <= 0xc0a80228 )' For some reason (subscription e-mail vs. sending e-mail) my previous messages on this topic seem not to have gone out to the list, so I'll re-summ

Re: [tcpdump-workers] Sniffing ranges of ips

2004-11-19 Thread Jefferson Ogata
Jefferson Ogata wrote: MMatos wrote: I want to write a little program that analyses packets within a given ip range. My current problem is to set a filter that work with ip ranges. For example I want to dump all traffic that arrives to my box from ips 192.168.2.15 to 192.168.2.40 I could write a

Re: [tcpdump-workers] Sniffing ranges of ips

2004-11-19 Thread Jefferson Ogata
MMatos wrote: I want to write a little program that analyses packets within a given ip range. My current problem is to set a filter that work with ip ranges. For example I want to dump all traffic that arrives to my box from ips 192.168.2.15 to 192.168.2.40 I could write all the ips in the range

Re: [tcpdump-workers] Sniffing ranges of ips

2004-11-18 Thread Avelino Rego
Avelino Rego wrote: MMatos wrote: Hi there! I want to write a little program that analyses packets within a given ip range. My current problem is to set a filter that work with ip ranges. For example I want to dump all traffic that arrives to my box from ips 192.168.2.15 to 192.168.2.40 I could

Re: [tcpdump-workers] Sniffing ranges of ips

2004-11-18 Thread Avelino Rego
MMatos wrote: Hi there! I want to write a little program that analyses packets within a given ip range. My current problem is to set a filter that work with ip ranges. For example I want to dump all traffic that arrives to my box from ips 192.168.2.15 to 192.168.2.40 I could write all the ips in

[tcpdump-workers] Sniffing ranges of ips

2004-11-18 Thread MMatos
Hi there! I want to write a little program that analyses packets within a given ip range. My current problem is to set a filter that work with ip ranges. For example I want to dump all traffic that arrives to my box from ips 192.168.2.15 to 192.168.2.40 I could write all the ips in the range but