Wireshark-users: Re: [Wireshark-users] SYN Capture Filter issue
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Bill Meier <wmeier@xxxxxxxxxxx>
Date: Tue, 17 Feb 2009 14:20:11 -0500
Bland Chuck-CNGR85 wrote:

"I get:The following display filter isn't a valid display filter:
tcp[13] & 0x02 = 2" 
As you should. You put CATURE FILTER syntax in the DISPLAY FILTER spec.
Please note I spec'd a capture filter.

"(What OS are you using ?)"

Win XP Pro

"tcp.flags.syn == 1  is a filter which will work."

Yes, that does work, if I want to use a display filter.

Chuck




Right you are....


Read fail on my part :(


Bill