--- Begin Message ---
Hi,
since TCP segment has no length of it's payload in it's header, there
is no easy way to filter TCP segments by payload length.
How to do it is by "subtracting the combined length of the segment
header and IP header from the total IP datagram length".
However segment header as well as IP header are not fixed.
Is there a way to filter packets by TCP payload length?
--
Best Regards,
Andrei Enshin
--- End Message ---
_______________________________________________
tcpdump-workers mailing list
tcpdump-workers@lists.tcpdump.org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers
