wireshark相关TIP

字数统计: 112阅读时长: 1 min

 2019/08/14 

检索类:

比较运算符: ==(eq), !=(ne), >(gt), <(lt), >=(ge), <=(le)

1
2
3

mysql.packet_number == 0
http.request.method == "POST"
tcp.port == 80

逻辑运算符: and, or, not
1
tcp.port ==80 and ip.src == 127.0.0.1
切片运算符[x:m], [x-m]
1
http.content_type[0:4] == "text"
搜索/匹配运算符 (contains), matches(~)
1
http contains "http://www.baidu.com"
转换函数 upper() , lower(), len(), count(), string()
1
upper(http.request.method) == "POST"

原文作者：Neo Anderson

CATALOG