Wireshark-users: Re: [Wireshark-users] capture filter
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Tony Trinh <tony19@xxxxxxxxx>
Date: Wed, 28 Sep 2011 22:04:38 -0400
I think these work:

IPv4
ip[12:4] != ip[16:4]


IPv6
ip[8:8] != ip[16:8]



On Wed, Sep 28, 2011 at 9:25 PM, Andrej van der Zee <andrejvanderzee@xxxxxxxxx> wrote:
Hi,

I am looking for a capture filter equal to the display filter "ip.src
!= ip.dst". How can I do this?

Cheers,
Andrej
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe