Groups > comp.os.linux.networking > #1210

Re: documentation for tcpdump

From	"ghand" <ghand45@hotmail.com>
Reply-To	"ghand" <ghand45@hotmail.com>
Subject	Re: documentation for tcpdump
Newsgroups	comp.os.linux.networking
References	<4f6ebc0b$1@x-privat.org> <2nt249-4eg.ln1@spitzner.org>
NNTP-Posting-Host	$$_ewhrlensdzs.feeder.x-privat.org
Message-ID	<4f6ed0aa$1@x-privat.org> (permalink)
Date	25 Mar 2012 10:00:42 +0100
Organization	X-Privat NNTP Server - http://www.x-privat.org
Lines	29
X-Authenticated-User	$$wp9v91t666kpbjaqevnc6hy$bm0
X-Complaints-To	abuse@x-privat.org
Path	csiph.com!usenet.pasdenom.info!aioe.org!newsfeed.x-privat.org!x-privat.org!not-for-mail
Xref	csiph.com comp.os.linux.networking:1210

Show key headers only | View raw

Ralph Spitzner <rasp@spitzner.org> wrote:
>ghand wrote:
>> there are three different kinds of qualifier.
>> type, dir, proto
>>
>> When I go to the man page, I don't see the word "qualifier"
>>
>> The man page does not mention the keyword   portrange
>> But it is mentioned here
>> http://www.msamir.net/the-art-of-network-debugging-with-tcpdump/
>
>Are you referring to:
>
>expression
>               selects  which  packets  will  be dumped.  If
>               no expression is given, all packets on the net will
>               be dumped.
>               Otherwise, only packets for which expression is `true'
>               will be dumped.
>
>               For the expression syntax, see pcap-filter(7).
>
>???
>	-rasp
>
>

thanks, well spotted

Back to comp.os.linux.networking | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

documentation for tcpdump "ghand" <ghand45@hotmail.com> - 2012-03-25 08:32 +0100
  Re: documentation for tcpdump Ralph Spitzner <rasp@spitzner.org> - 2012-03-25 09:22 +0200
    Re: documentation for tcpdump "ghand" <ghand45@hotmail.com> - 2012-03-25 10:00 +0100

csiph-web