need tcpdump/ngrep/etc expert
I am coming up against a brick wall trying to find info on how to use ngrep.I am interesting in filtering traffic TO and NOT from a UDP port, searching for a given string and matching the data + the IP its coming from.
Perhaps Ngrep isnt best suited for this. Any thoughts?