[Winpcap-users] Filtering expression syntax

Gianluca Varenni gianluca.varenni at cacetech.com
Tue Sep 30 22:34:33 GMT 2008


I would just write "icmp" or "ip and icmp"

GV
  ----- Original Message ----- 
  From: Ziara . 
  To: winpcap 
  Sent: Tuesday, September 30, 2008 9:18 AM
  Subject: [Winpcap-users] Filtering expression syntax


  Hi.
   
  I'm using filtering expression syntax. And I was wondering why if a write: ip proto icmp in:
   
  pcap_compile(adhandle, &fcode, "ip proto icmp", 1, netmask) 
   
  is a invalid expression syntax. Which one is the correct form to filter icmp packets?
   
  Thanks in advanced.


------------------------------------------------------------------------------
  Ahora llévate lo mejor de MSN y Windows Live, en tu móvil 


------------------------------------------------------------------------------


  _______________________________________________
  Winpcap-users mailing list
  Winpcap-users at winpcap.org
  https://www.winpcap.org/mailman/listinfo/winpcap-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20080930/54d74438/attachment.htm


More information about the Winpcap-users mailing list