ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Ethereal-dev: [Ethereal-dev] Suggestion for small change to display filter syntax

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Graeme Hewson <ghewson@xxxxxxxxxxxxxxxxxxx>
Date: Sat, 05 Jun 2004 19:39:15 +0100
The syntax for slices in display filters currently includes:

	[i:]     start_offset = i, end_offset = end_of_field

I propose we also allow [i-] to mean the same thing. ISTM this is more natural, since [i:j] means j is a length, while [i-j] means j is an offset, so [i-] would be a better fit to the documentation.