> > Hi, > > Can I use a capture filter syntax using the following notation? > > tcp[26:1]==0x70
I think it's: tcp[26]=0x70 or tcp[26:1]=0x70
> > Hi, > > Can I use a capture filter syntax using the following notation? > > tcp[26:1]==0x70
I think it's: tcp[26]=0x70 or tcp[26:1]=0x70