Wireshark-dev: [Wireshark-dev] byte range selections in tshark -e fields

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Cristian Constantin <const.crist@xxxxxxxxxxxxxx>
Date: Fri, 10 Jan 2025 15:07:52 +0100
hi!

wireshark GUI supports byte selection by means of indexing an protocol
field in display filters, e.g.:

"gsm_map.ms.autn[6] == 0x80"

is it possible to use expressions indexed like shown above for tshark
fields specified with -e option? what is the syntax for it?

thanks,
cristian