You might want to point to pcap-filter(7) for the BPF filter syntax
Brought to you by:
jpr5
Menu
▾
▴
#38 You might want to point to pcap-filter(7) for the BPF filter syntax
A few libpcap/tcpdump releases ago, I took the description of the filtering language out of the tcpdump man page and put it in a pcap-filter man page, as the language is implemented by libpcap, not tcpdump, and 1) changes to the filter syntax can update the documentation at the same time and 2) programs other than tcpdump use that syntax.
You might want to have the ngrep man page refer to it as well; see the current tcpdump man page for an example of that.
Appreciate the suggestion, thanks!
FYI bug reports are managed here now: https://github.com/jpr5/ngrep/issues