Re: wireshark display filters: display range of termination ids in one command

[Manolis Katsidoniotis <manoska () gmail com>]

Many thanks Joke

-------------------------------------------------

TCP port is integer so

ip.dst== 192.168.100.82 && (tcp.srcport >= 1000 && tcp.srcport <= 2000)

will do the trick

-------------------------------------------------

"port_1" is string so

ip.addr == x.x.x.x && (megaco.termid >= "port_1" && megaco.termid <=
"port_40")

is not working


Furthermore
H.248 TPC port is standard 2944 (only the terminations vary and they are
exchanged @ H.248 level)
so this is working but cannot provide the required result.

Does anyone happen to know how to *sub-string *and then convert the outcome
to integer *inside *a wireshark filter?

Or any other ideas are of course welcome :)))


Thanks
Manolis

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe