Can I excude a protocol?

[Pete Wilson <pete () pwilson net>]

I'm a new user of tcpdump, so please forgive these few amateur
questions.

1. I need to look at SNMP traffic, so I issue:

  node2:/root#tcpdump udp host node1 or node2 or node3
  tcpdump: 'udp' modifier applied to host
  node2:/root#

What am I doing wrong? I'm using ip instead of udp at the mo and that
works, of course.

2. I want to exclude certain protocols, like TCP. Is there any way to
do it? I note that host takes logical operations. Anything like that
for proto? 

Thanks!


=====
-- Pete Wilson    
   http://www.pwilson.net/
-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.