THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question
0

what is the expected value/format for display filter in { }?

  • retag add tags

I assumed "in" would allow a set of CSV values like tcp.stream in {1,8,12,18} but that results in syntax error.

RobD's avatar
1
RobD
asked 2018-10-17 14:33:30 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

3 Answers

0

Hi Rob, try it with spaces instead of commas.

jackpcraig's avatar
1
jackpcraig
answered 2018-10-17 14:40:25 +0000
edit flag offensive 0 remove flag delete link
more

Comments

Thanks! wow, been looking at too many packets to consider a space :)

RobD's avatar RobD (2018-10-17 14:46:10 +0000) edit
more
  • delete

@RobD, Since both answers seem to have resolved your question, please accept one of them using the checkmark so the question is no longer considered, "Unanswered".

cmaynard's avatar cmaynard (2018-10-17 15:04:02 +0000) edit
more
  • delete
add a comment see more comments
0

tcp.stream in {1 8 12 18} works for me. Not comma separated, but space-separated.

Packet_vlad's avatar
1.1k
Packet_vlad
answered 2018-10-17 14:41:28 +0000
edit flag offensive 0 remove flag delete link
more

Comments

Thank you for the quick response and answer

RobD's avatar RobD (2018-10-17 14:46:36 +0000) edit
more
  • delete
add a comment see more comments
0

See here for the relevant part of the users guide.

Jaap's avatar
13.7k
Jaap
answered 2018-10-17 15:33:25 +0000
edit flag offensive 0 remove flag delete link
more

Comments

Or refer also to The membership operator section of the wireshark-filter man page.

cmaynard's avatar cmaynard (2018-10-17 15:40:49 +0000) edit
more
  • delete
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer