Ask Your Question

roader's profile - activity

2017-12-11 01:30:13 +0000 marked best answer help me for convert "capture filter" to "bpf"

I solved capturing only the "ipv4" version. Just add "ip".

ip and ((tcp[((tcp[12:1] & 0xf0) >> 2):4] = 0x47455420) or (udp dst port 53))

How do I change this filter to BPF_STMT, BPF_JUMP"?

example ::

BPF_STMT(BPF_LD+BPF_H+BPF_ABS, 12),
BPF_JUMP(BPF_JMP+BPF_JEQ+BPF_K, ETHERTYPE_IP, 0, 11),
BPF_STMT(BPF_LD+BPF_H+BPF_ABS, 14),
BPF_JUMP(BPF_JMP+BPF_JSET+BPF_K, 0x4500, 0, 9),
2017-12-11 01:30:13 +0000 received badge  Scholar (source)
2017-12-07 00:39:37 +0000 edited question help me for convert "capture filter" to "bpf"

help me for convert "capture filter" to "bpf" I solved capturing only the "ipv4" version. Just add "ip". ip and ((tcp[(

2017-12-07 00:39:21 +0000 edited question help me for convert "capture filter" to "bpf"

help me for convert "capture filter" to "bpf" I solved capturing only the "ipv4" version. Just add "ip". ip and ((tcp[(

2017-12-07 00:39:13 +0000 edited question help me for convert "capture filter" to "bpf"

help me for convert "capture filter" to "bpf" I solved capturing only the "ipv4" version. Just add "ip". ip and ((tcp[(

2017-12-07 00:34:34 +0000 edited question help me for convert "capture filter" to "bpf"

howto get ipv4 version bpf filter ? and... could you convert this way? I solved capturing only the "ipv4" version. Just

2017-12-07 00:34:33 +0000 received badge  Editor (source)
2017-12-07 00:34:33 +0000 edited question help me for convert "capture filter" to "bpf"

howto get ipv4 version bpf filter ? and... could you convert this way? I solved capturing only the "ipv4" version. Just

2017-12-04 08:23:46 +0000 asked a question help me for convert "capture filter" to "bpf"

howto get ipv4 version bpf filter ? and... could you convert this way? i need ipv4 version bpf filter " (tcp[((tcp[12: