Re: [tcpdump-workers] Can I excude a protocol?

2004-11-01 Thread Guy Harris
On Oct 31, 2004, at 6:15 PM, Pete Wilson wrote: although do you want to exclude TCP or exclude everything but UDP (or exclude everything but port-161 and port-162 UDP traffic)? Well, since you ask :-) Yes, sure. Then that's where the If you want to see all UDP traffic to and from particular hosts

Re: [tcpdump-workers] Can I excude a protocol?

2004-10-31 Thread Pete Wilson
Thank you Guy! That was very, very helpful. --- Guy Harris <[EMAIL PROTECTED]> wrote: > > 2. I want to exclude certain protocols, like TCP. Is there any > > way to do it? I note that host takes logical operations. > > Anything like that for proto? > > "(ip host node1 or node2 or node3) and not

Re: [tcpdump-workers] Can I excude a protocol?

2004-10-31 Thread Guy Harris
Pete Wilson wrote: I'm a new user of tcpdump, so please forgive these few amateur questions. 1. I need to look at SNMP traffic, so I issue: node2:/root#tcpdump udp host node1 or node2 or node3 tcpdump: 'udp' modifier applied to host UDP doesn't know about "hosts" - that's IP's responsibility.

[tcpdump-workers] Can I excude a protocol?

2004-10-31 Thread Pete Wilson
I'm a new user of tcpdump, so please forgive these few amateur questions. 1. I need to look at SNMP traffic, so I issue: node2:/root#tcpdump udp host node1 or node2 or node3 tcpdump: 'udp' modifier applied to host node2:/root# What am I doing wrong? I'm using ip instead of udp at the mo a