I am coming up against a brick wall trying to find info on how to use ngrep.

I am interesting in filtering traffic TO and NOT from a UDP port, searching for a given string and matching the data + the IP its coming from.

Perhaps Ngrep isnt best suited for this. Any thoughts?

Hi,

you can a combination of:

grep string : to include the string
grep -v string : to exclude the string

to get the result that you desire.


Hope this helps.