Ethereal-users: Re: [ethereal-users] Filtering SYN Packets

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <guy@xxxxxxxxxx>
Date: Thu, 28 Oct 1999 13:54:46 -0700 (PDT)
> This is not a feature; somebody should fix up TCP to add more filterable
> items - if nobody else does it, I'll look into doing that some time
> today, so that the next release, at least, will let you do this.

"Some time today" turned out to be about now; I've got something
working, so you could do

	tcp.flags == 0x02

to display only packets with SYN and no other flags, or

	tcp.flags.syn

to display only packets with SYN set (I guess you could do

	tcp.flags.syn && !tcp.flags.ack

to display packets with SYN but not ACK).