Wireshark mailing list archives

Re: wireshark display filters: display range of termination ids in one command


From: "j.snelders" <j.snelders () telfort nl>
Date: Thu, 13 Oct 2011 19:19:24 +0200

Hi Manolis,

Here is another example:
ip.dst== 192.168.100.82 && (tcp.srcport >= 1000 && tcp.srcport <= 2000)

ip.addr == x.x.x.x && (megaco.termid >= "port_1" && megaco.termid <= "port_40")

HTH
Joke


On Thu, 13 Oct 2011 13:28:39 +0300 Manolis wrote:
Hello folks

I would like trying to display all ports from 1 to 40 (and filter out all
others).
ip.addr == x.x.x.x && ( ( megaco.termid == "port_1" ) || ( megaco.termid
==
"port_2" ) || ( megaco.termid == "port_3" ) || ... )

gets too big for 40 ports I tried

ip.addr == x.x.x.x && ( ( megaco.termid >= "port_1" ) && ( megaco.termid
<=
"port_40" ) )

but it displays all 760 ports that I have

any ideas?

Thanks
Manolis


       


___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe


Current thread: