I am running into a confusing problem wit bit masking in ethereal 0.9.12 on freebsd 4.8.

What I want to do is look at the bits 0 - 5 in the 1st octet of the UDP payload and see if it is equal to 0x02. My display filter is:

udp[8] & 0x1f = 2

When I apply this, I get an error box that reads:
 The string "&" was unexpected in this context

Does some one know what i am doing wrong? This filter works in tcpdump

Thanks,
Kevin Mason



Reply via email to