Network Analysis Using Wireshark 2 Cookbook(Second Edition)
上QQ阅读APP看书,第一时间看更新

Configuring substring operator filters

Offset filters are filters in which you actually say "go to field X in the protocol header, and check if the next Y bytes equal to...".

These filters can be used in many cases where a known byte string appears somewhere in the packet and you want to display packets that contain it.