Re: wireshark display filters: display range of termination ids in one command

[Martin Mathieson <martin.r.mathieson () googlemail com>]

On Thu, Oct 13, 2011 at 11:33 AM, Martin Mathieson <
martin.r.mathieson () googlemail com> wrote:

> On Thu, Oct 13, 2011 at 11:28 AM, Manolis Katsidoniotis <manoska () gmail com
> > wrote:
>
> > Hello folks
> >
> > I would like trying to display all ports from 1 to 40 (and filter out all
> > others).
> > ip.addr == x.x.x.x && ( ( megaco.termid == "port_1" ) || ( megaco.termid
> > == "port_2" ) || ( megaco.termid == "port_3" ) || ... )
> >
> > gets too big for 40 ports I tried
> >
> > ip.addr == x.x.x.x && ( ( megaco.termid >= "port_1" ) && ( megaco.termid
> > <= "port_40" ) )
> >
> > but it displays all 760 ports that I have
> >
> > any ideas?
> Surely you instead need:
>
> ip.addr == x.x.x.x && ( ( megaco.termid >= "port_1" ) || ( megaco.termid <=
> "port_40" ) )
>
> ?

Ignore this, what was I thinking...

You probably need to experiment with what the various comparison (>=, <=,
etc)  operators do on strings.
At best it'll be alphabetical, i.e. I seriously doubt "port_11" will be >=
"port_4".

Martin



> Thanks
> > Manolis
> >
> >
> > ___________________________________________________________________________
> > Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
> > Archives:    http://www.wireshark.org/lists/wireshark-users
> > Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
> >             mailto:wireshark-users-request () wireshark org
> > ?subject=unsubscribe
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe