Wireshark · Wireshark-users: Re: [Wireshark-users] SYN Capture Filter issue

[Bill Meier <wmeier@xxxxxxxxxxx>]

Bland Chuck-CNGR85 wrote:
> "I get:The following display filter isn't a valid display filter:
> tcp[13] & 0x02 = 2" 
>
> As you should. You put CATURE FILTER syntax in the DISPLAY FILTER spec.
> Please note I spec'd a capture filter.
>
> "(What OS are you using ?)"
>
> Win XP Pro
>
> "tcp.flags.syn == 1  is a filter which will work."
>
> Yes, that does work, if I want to use a display filter.
>
> Chuck


Right you are....


Read fail on my part :(


Bill