Wireshark-dev: Re: [Wireshark-dev] Searching on an offset in a range?
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Richard Sharpe <realrichardsharpe@xxxxxxxxx>
Date: Fri, 4 Nov 2016 19:57:33 -0700
On Fri, Nov 4, 2016 at 7:31 PM, Guy Harris <guy@xxxxxxxxxxxx> wrote:
> On Nov 4, 2016, at 7:21 PM, Richard Sharpe <realrichardsharpe@xxxxxxxxx> wrote:
>
>> I find myself wanting to search for packets where nfs.offset3 is in
>> the range of 100,000 and 200,000 say.
>>
>> However, a simple query has not done it, since it seems to have found
>> all the packets in the capture.
>
> nfs.offset3 >= 100000 && nfs.offset3 <= 200000 matches all packets in your capture?

Maybe there were more packets than I expected in the range I queried,
which was a 64kiB segment at a different offset.

I will have to go back and have a look.

-- 
Regards,
Richard Sharpe
(何以解憂？唯有杜康。--曹操)