Wireshark-users: Re: [Wireshark-users] wireshark display filters: display range of termination id
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: "j.snelders" <j.snelders@xxxxxxxxxx>
Date: Thu, 13 Oct 2011 19:19:24 +0200
Hi Manolis,

Here is another example:
ip.dst== 192.168.100.82 && (tcp.srcport >= 1000 && tcp.srcport <= 2000)

ip.addr == x.x.x.x && (megaco.termid >= "port_1" && megaco.termid <= "port_40")

HTH
Joke


On Thu, 13 Oct 2011 13:28:39 +0300 Manolis wrote:
>Hello folks
>
>I would like trying to display all ports from 1 to 40 (and filter out all
>others).
>ip.addr == x.x.x.x && ( ( megaco.termid == "port_1" ) || ( megaco.termid
>==
>"port_2" ) || ( megaco.termid == "port_3" ) || ... )
>
>gets too big for 40 ports I tried
>
>ip.addr == x.x.x.x && ( ( megaco.termid >= "port_1" ) && ( megaco.termid
><=
>"port_40" ) )
>
>but it displays all 760 ports that I have
>
>any ideas?
>
>Thanks
>Manolis