ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-dev: [Wireshark-dev] Byte matching

From: Matteo Pelliccia <matteo.pelliccia@xxxxxxxxx>
Date: Mon, 26 May 2014 10:07:08 +0200
Hi to all,
maybe it's a silly question. Is it possibile to know what byte match in display filter _expression_? For example if I have a pcap file with some packet and I run tshark with -Y option I would like to know which bytes match that _expression_, is it possibile?

Thank you

Matteo