Re: wireshark display filters: display range of termination ids in one command

[Martin Mathieson <martin.r.mathieson () googlemail com>]

On Thu, Oct 13, 2011 at 11:28 AM, Manolis Katsidoniotis
<manoska () gmail com>wrote:

> Hello folks
>
> I would like trying to display all ports from 1 to 40 (and filter out all
> others).
> ip.addr == x.x.x.x && ( ( megaco.termid == "port_1" ) || ( megaco.termid ==
> "port_2" ) || ( megaco.termid == "port_3" ) || ... )
>
> gets too big for 40 ports I tried
>
> ip.addr == x.x.x.x && ( ( megaco.termid >= "port_1" ) && ( megaco.termid <=
> "port_40" ) )
>
> but it displays all 760 ports that I have
>
> any ideas?
Surely you instead need:

ip.addr == x.x.x.x && ( ( megaco.termid >= "port_1" ) || ( megaco.termid <=
"port_40" ) )

?


> Thanks
> Manolis
>
> ___________________________________________________________________________
> Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
> Archives:    http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
>             mailto:wireshark-users-request () wireshark org
> ?subject=unsubscribe
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe