Re: question on sequence number filter

[Guy Harris <guy () alum mit edu>]

On Jul 13, 2008, at 10:01 PM, Ignacio, Domingo Jr Ostria - igndo001  
wrote:

> Is there a filter command where we can only specify to capture
> specifically the sequence number of a tcp packet header?

If you want to capture packets with a particular value of the sequence  
number, try

        tcp[4:4] = {that particular value}

For example, to capture TCP packets with a sequence number of 3147024,  
do

        tcp[4:4] = 3147024
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.