That expression will match any frame that has at least one avp with
code value 829 and at least one avp whose data is uint32 whose value
is 1.
I suspect that what you want is to match the *same* AVP with both
parts of the expression, which I don't think is possible with a simple
display filter.
Martin
On 7/10/07, cco <cristian.constantin@xxxxxxxxx> wrote:
hi!
has anyone tested a filter like this:
(diameter.avp.code == 829) && (diameter.avp.data.uint32 == 1)
is it suppossed to work? is it actually working in your config/ver?
in my version, it does not in the sense that it will always show all the
diameter commands having an avp with the code 829 but _not_ the ones
in which this avp has the value 1.
I am using Version 0.99.4 / linux
thanks!
bye now!
cristian
_______________________________________________
Wireshark-dev mailing list
Wireshark-dev@xxxxxxxxxxxxx
http://www.wireshark.org/mailman/listinfo/wireshark-dev