I hope this is the right forum. Thanks in advance for any help.
At work we are porting some software from Solaris to CentOs/Red Hat. I'd like my test scripts that parse some snoop hex output to work with tcpdump output, but I've come upon a stumbling block (though there are other workarounds).
When using snoop, I can enter the following command to get the packet data starting at byte 42:
Code:
snoop -x42 udp port 3210
With tcpdump, I have the -x option, but I can't figure out how to get the packet output to start at byte 42. Is this possible?
Thx,
Randy
Looking for tcpdump syntax to start hex output at a given byte offset in the packet
