Wireshark-users: [Wireshark-users] Display filter based on offset, hex

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: "Hague, Raymond [IDR]" <ray.hague@xxxxxxxx>
Date: Wed, 8 Jul 2009 10:44:18 -0500

I am attempting to create a display filter but some how keep missing the mark.  I would like to create a filter that would read:

 

Beginning byte=               0038

Length=                               4

Data="" 74:72:61:70

 

Simple enough, right?

 

Can anyone please lend a hand?

 

-Ray