BPF question "port > 2000"?

[Jason Haar <Jason.Haar () trimble co nz>]

Hi there

I'm wanting to filter a busy daemonlogger instance, and have tonnes of
SKINNY VoIP traffic which is all udp, and src port > 2000 to dst port >
2000: I'd like to just ignore it.

BPF doesn't appear to be able to filter ports with ">" or "<", so is
there any way I can do this? Thanks

-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1


------------------------------------------------------------------------------
Protect Your Site and Customers from Malware Attacks
Learn about various malware tactics and how to avoid them. Understand 
malware threats, the impact they can have on your business, and how you 
can protect your company and customers by using code signing.
http://p.sf.net/sfu/oracle-sfdevnl
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users