Wireshark-users: [Wireshark-users] Display filter on smb2.fid
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Rodrigo Borges Pereira <rodrigoborgespereira@xxxxxxxxx>
Date: Tue, 12 Dec 2017 20:33:30 +0000
Hi,

I'd like to match on partial smb2.fid, for example smb2.fid[0] == 00

But this seems to be an invalid _expression_. Is there any trick to it, or just not possible at all?

Thanks