> icmp[icmptype] = icmp-unreach > (tcp[tcpflags] & tcp-syn) != 0 Shoot, when I read the description I was hoping it was going to be one level further, e.g. icmptype = icmp-unreach or (tcpflags & tcp-syn) != 0. Bill - This is the TCPDUMP workers list. It is archived at http://www.tcpdump.org/lists/workers/index.html To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
