vurmarine.blogg.se

Wireshark command line capture filter
Wireshark command line capture filter












For example, a token-ring packet's source route field is Boolean. Integer fields are converted to their decimal representation.Īn integer may be expressed in decimal, octal, or hexadecimal notation, or as a C-style character constant. Upper() and lower() are useful for performing case-insensitive string comparisons. The “matches” or “~” operator allows a filter to apply to a specified Perl-compatible regular expression (Pure).

wireshark command line capture filter wireshark command line capture filter

The “contains” operator cannot be used on atomic fields, such as numbers or IP addresses. Think of a protocol or field in a filter as implicitly having the “exists” operator. The simplest filter allows you to check for the existence of a protocol or field.














Wireshark command line capture filter