ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-users: [Wireshark-users] Display filter based on offset, hex

From: "Hague, Raymond [IDR]" <ray.hague@xxxxxxxx>
Date: Wed, 8 Jul 2009 10:44:18 -0500

I am attempting to create a display filter but some how keep missing the mark.  I would like to create a filter that would read:

 

Beginning byte=               0038

Length=                               4

Data="" 74:72:61:70

 

Simple enough, right?

 

Can anyone please lend a hand?

 

-Ray