Ask Your Question

Is there a guide for using wlan[ ] style display filters as compared to wlan.fc.. types?

asked 2022-07-12 15:55:17 +0000

egarnel gravatar image

updated 2022-07-12 16:06:17 +0000

cmaynard gravatar image

I want to use wlan[0] == 0x... style display filters as opposed to wlan.fc.type==.. style for many wlan frame types. does a syntax guide exist? google is not providing much insight

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted

answered 2022-07-12 16:05:27 +0000

cmaynard gravatar image

updated 2022-07-12 16:05:51 +0000

The wireshark-filter man page is probably the best place to go for a description of the slice operator. But using the slice operator requires that you know much more information about the field such as its offset and length than simply filtering by field name, so in general I'd say that using the field name is going to be much easier and more convenient in most cases.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower


Asked: 2022-07-12 15:55:17 +0000

Seen: 154 times

Last updated: Jul 12 '22