Revision history [back]
It's not clear to me which field you are asking about so I'll give the answer for the two fields I think you may be asking about.
1) The Asterix Cat 048 - Special Purpose Data Item (or SP for short) with FRN 27 is used by implementations in a proprietary way.
However, the current implementation of the ASTERIX dissector (Wireshark v2.6.5) doesn't actually populate this field with any data, even if there is any.
Therefore the only way to match against it today is to either check if the 048_SP field exists or by checking the entire message, e.g.:
asterix.048_SP(matches if the asterix.048_SP field exists)asterix[23:3]==78:9a:bc(matches if the 3-byte sequence at offset 23 (zero based) is equal to the byte sequence 0x78, 0x9a, 0xbc).asterix contains 78:9a:bc(matches if the byte sequence 0x78, 0x9a, 0xbc is found in the field).
2) The Asterix Cat 048 - Special Position Indicator (or SPI for short) within FRN 3 is a 1-bit field/flag within Data Item 020, it can therefore be accessed by using the field name, i.e.:
asterix.048_020_SPI==1(matches if the SPI flag is set)
See Display Filters for details.
Edit: Corrected an error on my part where I thought it was possible to probe inside the asterix.048_SP field.
It's not clear to me which field you are asking about so I'll give the answer for the two fields I think you may be asking about.
1) The Asterix Cat 048 - Special Purpose Data Item (or SP for short) with FRN 27 is used by implementations in a proprietary way.
However, the current implementation of the ASTERIX dissector (Wireshark v2.6.5) doesn't actually populate this field with any data, even if there is any.
Therefore way, therefore the only way to match against it today is to either check if the 048_SP field exists or in Wireshark is by checking the entire message, using byte sequences, e.g.:
asterix.048_SPasterix.048_SP[4:3]==78:9a:bcif the asterix.048_SP field exists)asterix[23:3]==78:9a:bc(matches if the 3-byte sequence at offset234 (zero based)is equal toagainst the byte sequence 0x78, 0x9a,0xbc).0xbc).asterixasterix.048_SP contains 78:9a:bc0xbc0xbc is found in the field).
2) The Asterix Cat 048 - Special Position Indicator (or SPI for short) within FRN 3 is a 1-bit field/flag within Data Item 020, it can therefore be accessed by using the field name, i.e.:
asterix.048_020_SPI==1(matches if the SPI flag is set)
See Display Filters for details.
Edit: Corrected an error on my part where I thought it was possible to probe inside the asterix.048_SP field.
It's not clear to me which field you are asking about so I'll give the answer for the two fields I think you may be asking about.
1) The Asterix Cat 048 - Special Purpose Data Item (or SP for short) with FRN 27 is used by implementations in a proprietary way, therefore the only way to match against it in Wireshark is by using byte sequences, e.g.:
(matches the 3-byte sequence at offset 4 (zero based) against the byte sequence 0x78, 0x9a, 0xbc).(matches if the byte sequence 0x78, 0x9a, 0xbc is found in the field).
2) The Asterix Cat 048 - Special Position Indicator (or SPI for short) within FRN 3 is a 1-bit field/flag within Data Item 020, it can therefore be accessed by using the field name, i.e.:
(matches if the SPI flag is set)
See Display Filters for details.