Wireshark mailing list archives

Re: Searching on an offset in a range?


From: Richard Sharpe <realrichardsharpe () gmail com>
Date: Fri, 4 Nov 2016 19:57:33 -0700

On Fri, Nov 4, 2016 at 7:31 PM, Guy Harris <guy () alum mit edu> wrote:
On Nov 4, 2016, at 7:21 PM, Richard Sharpe <realrichardsharpe () gmail com> wrote:

I find myself wanting to search for packets where nfs.offset3 is in
the range of 100,000 and 200,000 say.

However, a simple query has not done it, since it seems to have found
all the packets in the capture.

nfs.offset3 >= 100000 && nfs.offset3 <= 200000 matches all packets in your capture?

Maybe there were more packets than I expected in the range I queried,
which was a 64kiB segment at a different offset.

I will have to go back and have a look.

-- 
Regards,
Richard Sharpe
(何以解憂?唯有杜康。--曹操)
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

Current thread: