Examine the correctness of filter

CS Lee geek00l at gmail.com
Sun Dec 3 20:17:01 EST 2006


Hey people,

While reading ra -b output, I come across this -

ra -b - tcp
(000) ldb      [142]
(001) and      #31
(002) jeq      #0x1             jt 3    jf 5
(003) ldb      [152]
(004) jeq      #0x6             jt 8    jf 9
(005) jeq      #0x2             jt 6    jf 9
(006) ldb      [179]
(007) jeq      #0x6             jt 8    jf 9
(008) ret      #96
(009) ret      #0

While this seems not so complicated, however is there any reference of argus
data format that I can refer such as the one shown in tcpdump -d which the
correctness of filter can be confirmed by looking at the packet headers.

Thanks.

-- 
Best Regards,

CS Lee<geekooL[at]gmail.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20061204/95888839/attachment.html>


More information about the argus mailing list