[Winpcap-users] Filtering expression syntax

Gianluca Varenni gianluca.varenni at cacetech.com
Tue Sep 30 22:34:33 GMT 2008

I would just write "icmp" or "ip and icmp"

  ----- Original Message ----- 
  From: Ziara . 
  To: winpcap 
  Sent: Tuesday, September 30, 2008 9:18 AM
  Subject: [Winpcap-users] Filtering expression syntax

  I'm using filtering expression syntax. And I was wondering why if a write: ip proto icmp in:
  pcap_compile(adhandle, &fcode, "ip proto icmp", 1, netmask) 
  is a invalid expression syntax. Which one is the correct form to filter icmp packets?
  Thanks in advanced.

  Ahora llévate lo mejor de MSN y Windows Live, en tu móvil 


  Winpcap-users mailing list
  Winpcap-users at winpcap.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20080930/54d74438/attachment.htm

More information about the Winpcap-users mailing list