hi!

wireshark GUI supports byte selection by means of indexing an protocol
field in display filters, e.g.:

"gsm_map.ms.autn[6] == 0x80"

is it possible to use expressions indexed like shown above for tshark
fields specified with -e option? what is the syntax for it?

thanks,
cristian
_______________________________________________
Wireshark-dev mailing list -- wireshark-dev@wireshark.org
To unsubscribe send an email to wireshark-dev-le...@wireshark.org

Reply via email to