Re: Raw USB capturing with libpcap 1.1?

[Chris Maynard <Chris.Maynard () gtech com>]

Guy Harris <guy <at> alum.mit.edu> writes:

> If you're passing to pcap_compile() a string that includes any filter 
> primitives other than the "{expr} {relop} {expr}" primitives mentioned in the 
> pcap-filter man page, or where any of the "special packet data accessors" 
> ({proto}[{expr}:{size}]) have a {proto} other than "link", yes, you're doing
> something wrong

Yup, I was mistakenly using a filter of "udp".  I changed the filter and it works
as advertised.  Thanks for the clarification.


-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.