On Mon, Nov 24, 2003 at 03:05:30PM +0100, Biot Olivier wrote: > A nice overview of pcap capture filter expression syntax is found on the > WinPCAP site: > http://winpcap.polito.it/docs/man/html/group__language.html
Note that "pcap capture filter expression syntax" changes over time; the syntax accepted by libpcap depends on the version of libpcap.