![]() ![]() Refer to the pcap-filter man page for more information. ![]() They are pcap-filter capture filter syntax and can't be used in this context. ![]() Refer to the wireshark-filter man page for more information.Īs the red color indicates, the following are not valid Wireshark display filter syntax. ip contains 153.11.105.34/38 Again, /38 is invalid, but also the contains operator does not work with IP addresses.ip.address = 153.11.105.34 or 153.11.105.35 This is invalid because there is no field called "ip.address" and you need to specify the field name for the second IP address too.(Ideally, the Wireshark display filter validation could be improved to detect this and turn the expression red instead of green.) ip.addr = 153.11.105.34/38 This is invalid because the maximum number of bits is /32. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |