Re: http capture

[Guy Harris <guy () alum mit edu>]

On Jul 13, 2004, at 9:52 AM, Andersen, Kevin J. wrote:

> However, that shows me all the traffic.  I am specifically looking for 
> each
> original request.

        tcp dst port 80

should catch all traffic going *to* port 80 but not all traffic coming 
*from* port 80 (although if the client port is also 80, it'll catch 
that - there's nothing you can easily do about that at the BPF filter 
expression level).

-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.