On Wed, Jun 05, 2002 at 11:54:19AM +0200, [EMAIL PROTECTED] wrote: > I read that the -F option allow to write a file like my file "expression" > so that (i suppose!) if i run tcpdump -F /path/to/expression, tcpdump work > with all my rules simultaneously!
No. A file that you use with the "-F" option contains *one* rule. If you want to use more than one rule at the same time, you must combine those rules into a single rule with the "and" operator: (dst net 192.168.1.0) and (tcp[13] & 2 == 2) - This is the TCPDUMP workers list. It is archived at http://www.tcpdump.org/lists/workers/index.html To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe