Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 23 Jan 2004 00:02:18 +0000
From:      Vadim Chekan <vchekan@rogers.com>
To:        phk@FreeBSD.org
Cc:        freebsd-current@freebsd.org
Subject:   JKH: tcpdump improvement
Message-ID:  <200401230002.18543.vchekan@rogers.com>

next in thread | raw e-mail | index | archive | help
Hello Poul,

I want to try to implement portrange feature in tcpdump as described on your 
JKH TODO list if it's still actual.

I have several thoughts about this task.

1. As soon as it is neccessary to implement port<N, port>N to implement this 
task it is a good idea to extend syntax with these operators. Actually after 
implementing "<" and ">" operators task is 80% done because it is possible to 
implement range by "port > N1 and port < N2" expression.

2. About range operator. I'd prefer to add functionality to existing "port" 
operator instead of introducing new keyword "portrange".
It seems easier to remember and use syntax like:
"port 40-400 and port 500"

What do you think?

Thanks
Vadim Chekan.




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200401230002.18543.vchekan>