# tcpdump: syntax error \[need help\]

**URL:** <https://community.unix.com/t/tcpdump-syntax-error-need-help/231692>\
**Category:** macOS\
**Created:** [February 15, 2009, 11:46am UTC](https://community.unix.com/t/tcpdump-syntax-error-need-help/231692 "2009-02-15T11:46:51Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![me1](https://community.unix.com/letter_avatar/me1/32/6_449c533f586939b6e5f246632a46421f.png) [@me1](https://community.unix.com/u/me1)\
**Post date:** [February 15, 2009, 11:46am UTC](https://community.unix.com/t/tcpdump-syntax-error-need-help/231692/1 "2009-02-15T11:46:51Z")

</div>

```php
sudo tcpdump -s 3600 -q -nxS -i en1 'ip and port 80' -w - | strings

```

this gives me a

```php
tcpdump: syntax error

```

and i dont know why.

plz help  
thanks a lot  
andrew 😉

---

<div class="post-metadata">

**Author:** ![frank\_rizzo](https://community.unix.com/letter_avatar/frank_rizzo/32/6_449c533f586939b6e5f246632a46421f.png) [@frank\_rizzo](https://community.unix.com/u/frank_rizzo)\
**Post date:** [February 15, 2009, 12:40pm UTC](https://community.unix.com/t/tcpdump-syntax-error-need-help/231692/2 "2009-02-15T12:40:38Z")

</div>

make sure that "'ip and port 80'" is the last argument. all options must be before the filter. see the usage.