Shell Programming and Scripting

Hello to all in forum,

Maybe some unix expert could help me. I have the following tcpdump command:

Code:

tcpdump -i any port 13907 -s 0 -w Out.cap

I would like to run tcpdump to only capture data related with especific string.

Within the dump the protocol is GSM MAP and the string is Address digits: 1006257359

If I do right click in Wireshark over that text, the "Copy as Filter" expression is:

Code:

gsm_map.address.digits == "1006257359"

Then, is possible to filter for that protocol and string, something like:

Code:

tcpdump -i any port 13907 -s 0 -w "gsm_map[Address digits: 1006257359]" Out.cap

Thanks in advance for your help.

---------- Post updated 08-10-12 at 09:17 AM ---------- Previous update was 08-09-12 at 11:46 PM ----------

Hello guys,

Somebody knows about this?

Thank in advance.

Moderator's Comments:

edit by bakunin: please do not "bump up" your threads. We have even a rule against this. If you do not get the expected answer or no answer at all it might be that nobody knows what you want to know, but it might as well be that: - you haven't explained your problem well enough so that nobody understands what exactly you want - you haven't given enough information to solve it and nobody feels obligated to ask for the missing data prior to solving the problem for you If you get no answer to your question you might as well try to address these (or other) possible problems and elaborate on your description instead of just adding "any takers??" to your thread.