황성현 wrote: > plz answer me.. I'm not sure what the question is, but if you mean "can I filter a dump file that I'm reading offline", the answer is "yes" - libpcap/WinPcap support setting a filter on a dump file opened with pcap_open_offline() or pcap_open(), and WinDump supports that.