Re: filter on packet size ?

["j.snelders" <j.snelders () telfort nl>]

Hi Janos,

Wireshark
Display filter: frame.cap_len >= 240 && frame.cap_len <=325

TShark
$ tshark -r test.pcap -R "frame.cap_len >= 240 && frame.cap_len <=325" -w
frame.cap_len.pcap

Best regards
Joke

On Fri, 20 Aug 2010 14:16:55 -0400 J?nos L?bb wrote:
> Hi,
>
> How can I filter out packets from a capture file, which have a certain size
> - let's say between 5180 and 10000 bytes?
>
> Thanks ahead,
>
> J?nos


       


___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe