Data filter by byte not string

Question

Hello All,

I want to search on the Data field of a TCP packet where I can search on a data byte pattern not a data string, Is this possible, if so how?

Regards

B

Answer 1

1	Yes, you can use display filter syntax to search for a particular byte sequence. Here's an example display filter to find `{A1,B2,C3,D4}` anywhere in `tcp.data`: `tcp.data contains A1:B2:C3:D4` link answered 13 Sep '11, 10:15 helloworld 2.6k●2●17●39 accept rate: 27%

You have a trillion packets.