[Winpcap-users] matching packets based on the content

McDouglas mcdouglas at animehq.hu
Thu May 10 18:51:52 GMT 2007


I have read in the winpacap manual that pcap_compile() can be used to 
filter the packets. However, something was not clear to me.

Is it possible to filter packets based on the content of the packet? 
(not the link header) Say, for example, match every tcp packet which 
hold data starting with 01 B2 hex values?

More information about the Winpcap-users mailing list