On 2007-05-10 17:41, McDouglas wrote:
> Is it possible to match packets based on the data content? Say, for
> example match only packets with the first two bytes of the data being
> (hex) 01 1B ?
If by "the data" you mean the TCP payload, yes.
tcp[((tcp[12:1] & 0xf0) >> 2):2] = 0x011b
The high n
Hi!
Is it possible to match packets based on the data content? Say, for
example match only packets with the first two bytes of the data being
(hex) 01 1B ?
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.
