Ethereal-users: Re: [Ethereal-users] Capture filter syntax question

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date: Mon, 7 Jul 2003 16:11:16 +0200
> 
> Hi,
> 
> Can I use a capture filter syntax using the following notation?
> 
> tcp[26:1]==0x70

I think it's:

tcp[26]=0x70
or
tcp[26:1]=0x70