Filtering on a field when there is more than one such field in a Wi-Fi packet

[Richard Sharpe <realrichardsharpe () gmail com>]

Hi folks,

I faced an interesting problem recently.

I was typing to find a particular tagged item with a tag length
greater than a specific size.

This presented a problem because many Wi-Fi packets have tagged fields
and a search filter like wlan.tag.number == X and wlan.tag.length >=
some-value is prone to false positives if any tagged field in the
frame has that number and any other tagged field in the frame has a
length ge the value.

How can I limit the length comparison to the tag found in the first comparison?

Do we even have that concept?

-- 
Regards,
Richard Sharpe
(何以解憂？唯有杜康。--曹操)(传说杜康是酒的发明者)
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe