> 
> Hi,
> 
> Can I use a capture filter syntax using the following notation?
> 
> tcp[26:1]==0x70

I think it's:

tcp[26]=0x70
or
tcp[26:1]=0x70


Reply via email to