[Winpcap-users] BPF: filtering outpoing packet

MqX mqx at low-axs.net
Wed Nov 16 16:50:54 GMT 2005


Hi all,

i have a strange problem filtering outgoing packets.

If i use a filter like that: "not dst host [ip here]" all works well, 
but if i try to touch tcp informations, like: "tcp port [port here]" or 
"tcp[8:4] == 0x00255611" (assuming there is such a packet) my code 
doesn't get any packet at all (pcap_next_ex() will allways return 0 
(timeout)).
Is that normal? Have i need to dump to file and read again to make tcp 
filter? My fault? =]


thx in advance
mqx



More information about the Winpcap-users mailing list