Wireshark: Difference between revisions
Content added Content deleted
| Line 65: | Line 65: | ||
~ |
~ |
||
http.host matches "acme\\.(org|com|net)" |
http.host matches "acme\\.(org|com|net)" |
||
* Combining Expressions |
|||
Logical AND |
|||
and |
|||
&& |
|||
ip.src==10.0.0.5 and tcp.flags.fin |
|||
Logical OR |
|||
or |
|||
|| |
|||
ip.src==10.0.0.5 or ip.src==192.1.1.1 |
|||
Logical XOR |
|||
xor |
|||
^^ |
|||
tr.dst[0:3] == 0.6.29 xor tr.src[0:3] == 0.6.29 |
|||
Logical NOT |
|||
not |
|||
! |
|||
not llc |
|||