Wireshark-users: [Wireshark-users] Problem using Display filter macro
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: <andre.noel@xxxxxxx>
Date: Wed, 16 May 2007 12:22:04 -0400

Hi,

 

I tried writing a Display filter macro for one I use often and it did not work. So I tried with the on I found

in the help file and it failed too. Can you help me on that one ?  

 

This one is from the help file:

( (ip.src == $1and ip.dst == $2 and tcp.srcpt == $3 and tcp.dstpt == $4) or (ip.src == $2and ip.dst == $1 and tcp.srcpt == $4 and tcp.dstpt == $3) )

 

Regards.

 

André Noël