Ethereal-users: [Ethereal-users] Display Filter on Hex in Data Window

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: "Keith French" <keithfrench@xxxxxxxxxxxxxxx>
Date: Fri, 16 Apr 2004 15:29:04 +0100
I want to build a display filter for some particular hex data e.g. the Hex aa that is often seen in ICMP pings being used by some RPC worms trying to find a machine to infect.
 
Can I use the "contains" relation something along the lines of:-
 
icmp contains "aa"
 
but make the value to be hex aa?
 
Keith French 
 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.657 / Virus Database: 422 - Release Date: 13/04/2004