Wireshark: Difference between revisions
→Wireshark Common Filters
Line 65:
~
http.host matches "acme\\.(org|com|net)"
* Combining Expressions
Logical AND
and
&&
ip.src==10.0.0.5 and tcp.flags.fin
Logical OR
or
||
ip.src==10.0.0.5 or ip.src==192.1.1.1
Logical XOR
xor
^^
tr.dst[0:3] == 0.6.29 xor tr.src[0:3] == 0.6.29
Logical NOT
not
!
not llc
| |||