ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-users: Re: [Wireshark-users] filter for jpeg can not use

From: damker <damker@xxxxxxxx>
Date: Mon, 15 Jun 2020 13:30:25 +0800
the unit of measurement for this filter is confused.
such as "jpeg.main_hdr.width == 80", it means "the original value is 80 (means 640 pixels) " or "the transform value (pixels) is 80 " ?
if it means the original value, the max value should be 255.
if it means the transform valuethe max value should not be 255 

i had did some test,when i use "jpeg.main_hdr.width == 80", it display blank, 
when i use "jpeg.main_hdr.width > 255", the message with 640 pixels(the original value is 80 ) displayed,
it mean that the filter is "the transform value".







damker