On Fri, Nov 4, 2016 at 7:31 PM, Guy Harris <[email protected]> wrote: > On Nov 4, 2016, at 7:21 PM, Richard Sharpe <[email protected]> > wrote: > >> I find myself wanting to search for packets where nfs.offset3 is in >> the range of 100,000 and 200,000 say. >> >> However, a simple query has not done it, since it seems to have found >> all the packets in the capture. > > nfs.offset3 >= 100000 && nfs.offset3 <= 200000 matches all packets in your > capture?
Maybe there were more packets than I expected in the range I queried, which was a 64kiB segment at a different offset. I will have to go back and have a look. -- Regards, Richard Sharpe (何以解憂？唯有杜康。--曹操) ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <[email protected]> Archives: https://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev mailto:[email protected]?subject=unsubscribe
