 | 1 | initial version |
Have you looked at the String-Matching Capture Filter Generator on the Wireshark Online Tools page?
Filter for Fuji, offset 11:
tcp[((tcp[12:1] & 0xf0) >> 2) + 11:4] = 0x46756a69
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
