Re: [tcpdump-workers] Sniffing ranges of ips

2004-11-19 Thread MMatos
Alexander Dupuy wrote: Jefferson Ogata wrote: Or you can do something more utilitarian, such as: tcpdump [options] '( ip[12:4] >= 0xc0a8020f ) and ( ip[12:4] <= 0xc0a80228 )' For some reason (subscription e-mail vs. sending e-mail) my previous messages on this topic seem not to have gone out to

Re: [tcpdump-workers] Sniffing ranges of ips

2004-11-19 Thread Alexander Dupuy
Guy Harris wrote: Try it with the top-of-tree CVS version; I've made some optimizer fixes that will, I think, fix this. I saw the commit messages. However, I'm unable to update my CVS version; as noted before, I get an abrupt server abort, and don't have other ideas on how to solve this: $ cvs -d

Re: [tcpdump-workers] Sniffing ranges of ips

2004-11-19 Thread Robert Lowe
MMatos wrote: tcpdump [options] '( ip[12:4] >= 0xc0a8020f ) and ( ip[12:4] <= 0xc0a80228 )' First of all thanks for the precious help you give me ! I' ve been analysing the scripts and they expand the ranges to all ips and then work around with the netmasks .. Indead i like the 2nd way you're s

Re: [tcpdump-workers] Sniffing ranges of ips

2004-11-19 Thread Jefferson Ogata
MMatos wrote: Jefferson Ogata wrote: Jefferson Ogata wrote: MMatos wrote: For example I want to dump all traffic that arrives to my box from ips 192.168.2.15 to 192.168.2.40 I could write all the ips in the range but that's not a good solution, so how can implement that filter correctly using the

Re: [tcpdump-workers] Sniffing ranges of ips

2004-11-19 Thread MMatos
Jefferson Ogata wrote: Jefferson Ogata wrote: MMatos wrote: I want to write a little program that analyses packets within a given ip range. My current problem is to set a filter that work with ip ranges. For example I want to dump all traffic that arrives to my box from ips 192.168.2.15 to 192.1

Re: [tcpdump-workers] Sniffing ranges of ips

2004-11-19 Thread Guy Harris
Alexander Dupuy wrote: Note also that there is a bug in the libpcap BPF optimizer (as of 0.8.3) that breaks the hack described above, Try it with the top-of-tree CVS version; I've made some optimizer fixes that will, I think, fix this. However, the libpcap 0.7 optimizer not only generates correc

Re: [tcpdump-workers] Sniffing ranges of ips

2004-11-19 Thread Alexander Dupuy
Jefferson Ogata wrote: Or you can do something more utilitarian, such as: tcpdump [options] '( ip[12:4] >= 0xc0a8020f ) and ( ip[12:4] <= 0xc0a80228 )' For some reason (subscription e-mail vs. sending e-mail) my previous messages on this topic seem not to have gone out to the list, so I'll re-summ

Re: [tcpdump-workers] Sniffing ranges of ips

2004-11-19 Thread Jefferson Ogata
Jefferson Ogata wrote: MMatos wrote: I want to write a little program that analyses packets within a given ip range. My current problem is to set a filter that work with ip ranges. For example I want to dump all traffic that arrives to my box from ips 192.168.2.15 to 192.168.2.40 I could write a

Re: [tcpdump-workers] Sniffing ranges of ips

2004-11-19 Thread Jefferson Ogata
MMatos wrote: I want to write a little program that analyses packets within a given ip range. My current problem is to set a filter that work with ip ranges. For example I want to dump all traffic that arrives to my box from ips 192.168.2.15 to 192.168.2.40 I could write all the ips in the range