Vossie wrote:
Sorry guys. I was typing too fast. I mean HTTP packets (that transfer the data) and not the TCP ACK's :-)
Looking at a stream of HTTP carried in TCP segments without looking at the ACKs seems a bit odd, but if you really don't want to see the bare ACKs, you could probably filter on packet size - a bare ACK would just be the TCP, IP and link-level headers.
rick jones - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.
