Wireshark · Wireshark-users: [Wireshark-users] Display filter on smb2.fid

ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-users: [Wireshark-users] Display filter on smb2.fid

From: Rodrigo Borges Pereira <rodrigoborgespereira@xxxxxxxxx>

Date: Tue, 12 Dec 2017 20:33:30 +0000

Hi,

I'd like to match on partial smb2.fid, for example smb2.fid[0] == 00

But this seems to be an invalid _expression_. Is there any trick to it, or just not possible at all?

Thanks

Follow-Ups:
- Re: [Wireshark-users] Display filter on smb2.fid
  - From: Jeff Morriss

Prev by Date: Re: [Wireshark-users] how to enable ip reassembly in tshark
Next by Date: Re: [Wireshark-users] Display filter on smb2.fid
Previous by thread: Re: [Wireshark-users] how to enable ip reassembly in tshark
Next by thread: Re: [Wireshark-users] Display filter on smb2.fid
Index(es):
- Date
- Thread

© Wireshark Foundation · Privacy Policy

Facebook·Mastodon·Twitter·YouTube