Ethereal-users: RE: [Ethereal-users] Binary test in a Display Filter

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Biot Olivier <Olivier.Biot@xxxxxxxxxxx>
Date: Thu, 12 Feb 2004 10:33:55 +0100
Hi Wes,

There are no bitfield operators yet in the Ethereal display filter language.
Maybe the bit you're looking for is already accessible with a (maybe hidden)
header field name.

You can search for the available display filters for a given protocol by
clicking on the "Filter" button on the bottom of the Ethereal window (or by
choosing "Analyze" in the menu and then "Display filters..."), and then
click on the "Add Expression..." button. I'm assuming Ethereal 0.10.0.

Regards,

Olivier

|-----Original Message-----
|From: Wes
|
|Hi,
|
|I want to be able to test a particular bit in a
|Display Filter. Is this possible?
|
|I currently am just doing a Byte test using something
|like this:
|
|rtp.payload[4:1] == 2C
|
|What I really need is to be able to determine if bit 2
|of this Byte is set or not.
|
|Thanks,
|
|Wes