Ask Your Question

tcp[13] & 4 == 4 doesn't seem to work on v. 3.4.9

asked 2021-10-28 18:51:19 +0000

arisk gravatar image

Hello everyone,

tcp[13] & 4 == 4 doesn't seem to work for me on v. 3.4.9 More specifically the "==4" part doesn't seem to be accepted by the display filter box. (everything's green and nice if you only type "tcp[13] & 4")

I'm quite new in Wireshark... Do i miss something on my syntax? Is there something i have to configure on my Wireshark first?

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted

answered 2021-10-28 20:52:04 +0000

arisk gravatar image

Well, finally the answer is simple. tcp[13] & 4 == 4 is a capture filter but I tried to use it as a display filter... it would never work. Hopefully i'll get used to Wireshark...

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower


Asked: 2021-10-28 18:49:05 +0000

Seen: 110 times

Last updated: Oct 28 '21