Opened 11 years ago

Closed 11 years ago

#182 closed defect (fixed)

Need help with using BPF filters with tcpprep

Reported by: sunilis@… Owned by: aturner
Priority: low Milestone: 3.1
Component: tcpprep Version: 3.0.1
Keywords: Cc:
Operating System: Add to FAQ?: no
Hardware: All
Output of tcpreplay -V: [root]# tcpreplay -V tcpreplay version: 3.0.beta13 (build 1732) Copyright 2001-2007 by Aaron Turner <aturner at synfin dot net> Cache file supported: 04 Not compiled with libnet. Compiled against libpcap: 0.8.3 64 bit packet counters: disabled Verbose printing via tcpdump: enabled [root@]#

Description

Hi :

Why does tcpprep complain about this BPF filter. The same filter when used with tcpdump works ok.

[root@]# /usr/local/bin/tcpprep --include=F:"ether src 00:10:db:ff:a0:70" --mac 00:10:db:ff:a0:70 --pcap=Brian_Test001-00000 --cachefile=Brian_Test001-00000.cache

Fatal Error: Error compiling BPF filter: syntax error
[root@]#

Change History (2)

comment:1 Changed 11 years ago by aturner

  • Milestone set to 3.1
  • Status changed from new to assigned

Bug also is in 3.0.1

comment:2 Changed 11 years ago by aturner

  • Resolution set to fixed
  • Status changed from assigned to closed

(In [1875]) fix error w/ processing BPF filters. fixes #182

Note: See TracTickets for help on using tickets.