Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

But I want it to filter only if the conditions are true in a single message.

Unfortunately, the Wireshark filtering engine currently has no notion of "within a single message", so there's no way to do that.