Ethereal-users: RE: [Ethereal-users] pcap filter syntax for ESP...

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: "McHugh, Sean" <SMchugh@xxxxxxxx>
Date: Tue, 25 Sep 2001 16:29:00 -0400
i tried the first one last night and it gave me a parse error -
i just tried it now and it seems to like it. go figure.

thanks

sean

>If the libpcap that Ethereal is using is libpcap 0.5 or later (current
>versions of WinPcap are based on libpcap 0.5), you write that filter as

	esp

>If the libpcap that Ethereal is using is an earlier version, you write

>	ip proto 50