Ethereal-users: Re: [Ethereal-users] Capture filter syntax question

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: MH <procana@xxxxxxxxxxxxxx>
Date: Mon, 7 Jul 2003 13:06:45 -0400
Hi Andreas,

Yes, you can use == or = to match a value.
What are you trying to capture at that offset?

Hope this helps,
Mike

On Monday 07 July 2003 09:02 am, andreas.sikkema@xxxxxxxxxxx wrote:
> Hi,
>
> Can I use a capture filter syntax using the following notation?
>
> tcp[26:1]==0x70
>
>
> --
> Andreas Sikkema
> andreas.sikkema@xxxxxxxxxxx
> "While you're waiting, read the free novel we sent you.
>  It's a Spanish story about a guy named `Manual'" - Dilbert
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users