Wireshark-users: Re: [Wireshark-users] Display Filter setting - Odd/Even packets
From: "Trevor Baker" <trevor.baker@xxxxxxxxxxxxx>
Date: Thu, 13 Dec 2007 15:31:38 -0000
Hi Kieth Its a bit-wise AND not a logical AND. Since all odd numbered frames will have the least significant bit set and all even numbered frames will have it clear, this will match only odd numbered frames. Trevor Baker Principal Software Engineer Westell Limited Ringway House, Bell Road, Daneshill, Basingstoke, RG24 8FB, United Kingdom * Office: +44 (0)1256 843311 * trevor.baker@xxxxxxxxxxxxx * www.westell.co.uk Gateways to Convergence -----Original Message----- From: wireshark-users-bounces@xxxxxxxxxxxxx [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Keith French Sent: 13 December 2007 14:19 To: Community support list for Wireshark Subject: Re: [Wireshark-users] Display Filter setting - Odd/Even packets What does the use of the single ampersand (&) do in the last part of the filter:- frame.number & 1 I can't find this documented, only the && for AND? ----- Original Message ----- From: "Luis EG Ontanon" <luis.ontanon@xxxxxxxxx> To: "Community support list for Wireshark" <wireshark-users@xxxxxxxxxxxxx> Sent: Tuesday, December 11, 2007 4:53 PM Subject: Re: [Wireshark-users] Display Filter setting - Odd/Even packets > "frame.number > 400 && frame.number < 500 && (!(frame.number & 1))" > > On Dec 11, 2007 5:48 PM, Shuky Limony <shukyli@xxxxxxxxx> wrote: >> Thanks. >> And how can I do it for Even numbers? ( 402,404,406..) >> >> >> >> >> On 12/11/07, Stig Bjørlykke <stig@xxxxxxxxxxxxx> wrote: >> > 2007/12/11, Shuky Limony <shukyli@xxxxxxxxx>: >> > > Is there a way to set a display filter for only odd packets number in >> > > a >> > > range? >> > > e.g. between Packet 401 and 499 - result as packets >> 401,403,405......499 >> > >> > What about this? >> > >> > "frame.number > 400 && frame.number < 500 && frame.number & 1" >> > >> > >> > -- >> > Stig Bjørlykke >> > _______________________________________________ >> > Wireshark-users mailing list >> > Wireshark-users@xxxxxxxxxxxxx >> > http://www.wireshark.org/mailman/listinfo/wireshark-users >> > >> >> >> _______________________________________________ >> Wireshark-users mailing list >> Wireshark-users@xxxxxxxxxxxxx >> http://www.wireshark.org/mailman/listinfo/wireshark-users >> >> > > > > -- > This information is top security. When you have read it, destroy yourself. > -- Marshall McLuhan > _______________________________________________ > Wireshark-users mailing list > Wireshark-users@xxxxxxxxxxxxx > http://www.wireshark.org/mailman/listinfo/wireshark-users > -------------------------------------------------------------------------------- No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.5.503 / Virus Database: 269.17.1/1182 - Release Date: 12/12/2007 11:29 _______________________________________________ Wireshark-users mailing list Wireshark-users@xxxxxxxxxxxxx http://www.wireshark.org/mailman/listinfo/wireshark-users
- Prev by Date: Re: [Wireshark-users] Display Filter setting - Odd/Even packets
- Next by Date: [Wireshark-users] DOCSIS rf-to-ethernet tap?
- Previous by thread: Re: [Wireshark-users] Display Filter setting - Odd/Even packets
- Next by thread: [Wireshark-users] (wireshark:26800): Gtk-WARNING **: cannot open display:
- Index(es):