Hi,

Maybe this works for you.
capture filter: tcp
display filter: frame[58] eq d4

Thanx,
Jaap

On Thu, 26 Oct 2006, [ISO-8859-1] Y?ce Sungur wrote:

> Hi,
>
> I am trying to capture  some tcp streams and check for the 5th  byte having 
> the value of D4,,
>
> I captured with Wireshark and used tcpsplit  to create the tcp streams and 
> used grep,,
>
> Is it possible to do it via Wireshark  without all the other programs,??
>

_______________________________________________
Wireshark-users mailing list
[email protected]
http://www.wireshark.org/mailman/listinfo/wireshark-users

Reply via email to