First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question
0

tcp[13] & 4 == 4 doesn't seem to work on v. 3.4.9

Hello everyone,

tcp[13] & 4 == 4 doesn't seem to work for me on v. 3.4.9 More specifically the "==4" part doesn't seem to be accepted by the display filter box. (everything's green and nice if you only type "tcp[13] & 4")

I'm quite new in Wireshark... Do i miss something on my syntax? Is there something i have to configure on my Wireshark first?

arisk's avatar
1
arisk
asked 2021-10-28 18:51:19 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

0

Well, finally the answer is simple. tcp[13] & 4 == 4 is a capture filter but I tried to use it as a display filter... it would never work. Hopefully i'll get used to Wireshark...

arisk's avatar
1
arisk
answered 2021-10-28 20:52:04 +0000
edit flag offensive 0 remove flag delete link
more

Comments

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer