> wireshark GUI supports byte selection by means of indexing an protocol
> field in display filters, e.g.:
>
> "gsm_map.ms.autn[6] == 0x80"
>
> is it possible to use expressions indexed like shown above for tshark
> fields specified with -e option? what is the syntax for it?
Yes it is, and it su
On Fri, Jan 10, 2025 at 9:08 AM Cristian Constantin via Wireshark-dev <
wireshark-dev@wireshark.org> wrote:
> wireshark GUI supports byte selection by means of indexing an protocol
> field in display filters, e.g.:
>
> "gsm_map.ms.autn[6] == 0x80"
>
> is it possible to use expressions indexed like
