Wireshark-users: Re: [Wireshark-users] How to filter using a negative number?
From: Bill Meier <wmeier@xxxxxxxxxxx>
Date: Sat, 10 Nov 2012 11:24:54 -0500
On 11/9/2012 9:12 PM, spdev31 wrote:
Hello all,

I'm using Wireshark for logging USB traffic and have a signed field I'd like
to filter on (e.g. usb.urb_status != -115).  But, I cannot seem to filter
based on a negative number without getting an error (e.g. "-115" cannot be
found among the possible values for usb.urb_status).  Does anyone know how
to filter signed values with Wireshark?

Thanks,
Shaun



I'm able to enter 'usb.urb_status' != -115' on my 32 bit Windows w/o problems using the latest dev Wireshark.

What version of Wireshark and what platform/OS are you using ?