Try this:
ip[15,19]==28:28
On Wed, 21 Mar 2007 20:33:07 -0400, "Christopher Clayden"
<[EMAIL PROTECTED]> said:
> Hello Everyone,
>
>
>
> Can anyone tell me what the wild card is in wireshark when used in IP
> addresses, if there is such?
>
>
>
> For example, say you want to create a filter
Hi,
You'll want to use the slice operator for that. First look up the offset
into the IP header to the source and destination addresses parts of
interest (15 and 19), then apply the slice operator to ip. Like so:
(ip[15:1]==28)||(ip[19:1]==28)
Thanx,
Jaap
On Wed, 21 Mar 2007, Christopher Clayden
Hello Everyone,
Can anyone tell me what the wild card is in wireshark when used in IP
addresses, if there is such?
For example, say you want to create a filter for all DC's in your
organization and there addresses are as follows:
192.168.1.40
192.168.2.40
192.168.3.40
192.168.4.40
192
