tcpdump mailing list archives

Tcpdump Expression to get the rst packets for ipv6


From: "Abhilash Shastry" <abshastr () cisco com>
Date: Tue, 30 Nov 2010 13:16:13 +0530

Hi All,

 

I am looking out for the expression to get the reset packets for ipv6
through tcpdump.

At present we are using the below expression for ipv4.

 

[/usr/sbin/tcpdump -i  eth1 -s 1600 'tcp[13] & 4 != 0]

As mentioned in tcpdump.org site[http://www.tcpdump.org/tcpdump_man.html]
under the section BUGS, tcp[0] expression will work only on ipv4 and not on
ipv6 packets, could you please let us know the equivalent expression for
ipv6 if any. Or could you please let us know your inputs on how to proceed
further to get the rst packets for ipv6 using tcpdump tool..

 

Regards,

Abhilash

 

 

-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.


Current thread: