I'm running the latest versions of tcpdump and pcap. I can't filter on tcp port ranges.
These don't work - no packets are captured:
tcpdump -i eth1 tcp[0:2] > 1023 and tcp[0:2] < 60000 tcpdump -i eth1 'tcp[0:2] > 1023 and tcp[0:2] < 60000' tcpdump -i eth1 'tcp[0:2] > 1023' and 'tcp[0:2] < 60000' tcpdump -i eth1 'tcp[0:2]>1023' and 'tcp[0:2]<60000' tcpdump -i eth1 \( 'tcp[0:2] > 1023' and 'tcp[0:2] < 60000' \)
Is there a way to make this work?
Ed - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.
