Thursday, December 6, 2018

tcpdump filter Syn-Ack packets

Hello,

I want to filter all the Syn-Ack packets using tcpdump. I am using this filter:

krishnar:~ krishnar$ sudo tcpdump -c 25 ' tcp[tcpflags] & (tcp-ack & tcp-syn) !=0 ' -nnn tcpdump: data link type PKTAP tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on pktap, link-type PKTAP (Apple DLT_PKTAP), capture size 262144 bytes 

This is not matching any traffic. Can anyone please tell me why this is not working?



No comments:

Post a Comment