what is the expected value/format for display filter in { }?
I assumed "in" would allow a set of CSV values like tcp.stream in {1,8,12,18} but that results in syntax error.
Hi Rob, try it with spaces instead of commas.
tcp.stream in {1 8 12 18}
works for me. Not comma separated, but space-separated.
See here for the relevant part of the users guide.
Or refer also to The membership operator section of the wireshark-filter man page.
Asked: 2018-10-17 14:33:30 +0000
Seen: 665 times
Last updated: Oct 17 '18