On Fri, Nov 4, 2016 at 7:31 PM, Guy Harris <guy@xxxxxxxxxxxx> wrote:
> On Nov 4, 2016, at 7:21 PM, Richard Sharpe <realrichardsharpe@xxxxxxxxx> wrote:
>
>> I find myself wanting to search for packets where nfs.offset3 is in
>> the range of 100,000 and 200,000 say.
>>
>> However, a simple query has not done it, since it seems to have found
>> all the packets in the capture.
>
> nfs.offset3 >= 100000 && nfs.offset3 <= 200000 matches all packets in your capture?
Maybe there were more packets than I expected in the range I queried,
which was a 64kiB segment at a different offset.
I will have to go back and have a look.
--
Regards,
Richard Sharpe
(何以解憂？唯有杜康。--曹操)