On Aug 24, 2004, at 6:37 PM, Ed Sawicki wrote:
There appears to be a parser error with compound expressions like this:
tcpdump -i eth0 '(tcp[0:2]>=1024) && (tcp[0:2] <=60000)'
You probably mean "compiler error" - it's probably a problem with the optimizer, not the parser:
http://sourceforge.net/tracker/index.php? func=detail&aid=940212&group_id=53067&atid=469577
Is there a way around this?
As per that bug, turn off the optimizer: tcpdump -i eth0 -O '(tcp[0:2]>=1024) && (tcp[0:2] <=60000)'
- This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.