Hello !

I am using
tcpdump -w /tr.cap -p -n -s 0 "udp"
to trace my network trafic.
(analysing later)

I want to reduce the size of the trace files.
Firtst i can use the great -C option but old files are not deleted...
Second I don't want trace RTP packet but i can't find how to use ("not rtp" , "udp.port < 10000"...)

Idealy i want trace only few firsts bytes of RTP but all bytes of other...

Any idea ?
Thanks