1 | initial version |
!(smb2.olb.length == 0
matches frames that don't include the field smb2.olb.length
.
What about smb2.olb.length and not (smb2.olb.length == 0)
?
or smb2.olb.length != 0
?
Display filters are "evolving" with every/most/some? releases.
What’s New In Wireshark 4.0? and Building Display Filter Expressions