<html>
<head>
<style>
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
FONT-SIZE: 10pt;
FONT-FAMILY:Tahoma
}
</style>
</head>
<body class='hmmessage'>
Hello everybody,<br><br>I'm new to this winpcap library.<br>Currently i'm using winpcap <span style="font-weight: bold;">4.0.1</span> in my VC++ compiler.<br>I have to filter the TCP packets holding the SYN flag.<br><br><br>Whenever i tried using the filter string "tcp[13] & 0x02 != 0", it just hanging in pcap_next_ex() function.Still its waiting for the packets to come.<br>But i'm getting the SYN packets in my ethereal running at the same time.<br>Also i tried, "tcp[tcpflags] & tcp-syn != 0" and "tcp port 8080 and tcp-syn". None of them works.<br>I didn't get any error message while compiling and setting the filter.<br><br>But Its works fine with the filter strings "tcp" and "tcp port 8080".<br><br>Is this the correct expression what i'm looking for?<br>That will be great for me if anybody help me regarding this.<br><br>Thanks,<br>Sethu<br><br><br><br><br><br /><hr />It's about getting married. Click here! <a href='http://ss1.richmedia.in/recurl.asp?pid=201' target='_new'>Try it!</a></body>
</html>