The command "tethereal -R 'frame[-2:]==08:10' " will display all frames that match your condition
Martin Visser Network Consultant Technology & Infrastructure - Consulting & Integration HP Services 3 Richardson Place North Ryde, Sydney NSW 2113, Australia Phone *: +61-2-9022-1670 Mobile *: +61-411-254-513 Fax 7: +61-2-9022-1800 E-mail * : martin.visserAThp.com -----Original Message----- From: darren [mailto:[EMAIL PROTECTED] Sent: Wednesday, 7 May 2003 1:28 PM To: [EMAIL PROTECTED] Subject: [Ethereal-users] searching for pattern in packets Hi all, I would like to check the last two bytes of every packet in one of my capture files for a particular pattern. i.e. i would like to know if the last two bytes in my packets contains 0x0810. Any good and efficient way to do this via tethereal or tcpdump in combination with grep? thanx in advance _______________________________________________ Ethereal-users mailing list [EMAIL PROTECTED] http://www.ethereal.com/mailman/listinfo/ethereal-users
