First time here? Check out the FAQ!
answered 2021-10-14 14:41:23 +0000
Have you looked at the String-Matching Capture Filter Generator on the Wireshark Online Tools page? Filter for Fuji, offset 11: tcp[((tcp[12:1] & 0xf0) >> 2) + 11:4] = 0x46756a69
Fuji
tcp[((tcp[12:1] & 0xf0) >> 2) + 11:4] = 0x46756a69
