Search code examples
linuxnetwork-programmingpcaptcpdump

How to filter out some packets in a pcap file, based on their host dst ip?

I am trying that:

$ zcat my_pcap.gz | /usr/sbin/tcpdump -r - -nn host dst 161.15.215.20
reading from file -, link-type EN10MB (Ethernet)
tcpdump: syntax error

Why is the reason for the syntax error ?

Solution

  • Documents say "dst" should precede "host"

    Link