Wireshark mailing list archives
Re: filter for jpeg can not use
From: damker <damker () sina com>
Date: Mon, 15 Jun 2020 13:30:25 +0800
the unit of measurement for this filter is confused. such as "jpeg.main_hdr.width == 80", it means "the original value is 80 (means 640 pixels) " or "the transform value (pixels) is 80 " ? if it means the original value, the max value should be 255. if it means the transform value, the max value should not be 255 i had did some test,when i use "jpeg.main_hdr.width == 80", it display blank, when i use "jpeg.main_hdr.width > 255", the message with 640 pixels(the original value is 80 ) displayed, it mean that the filter is "the transform value". damker
___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org> Archives: https://www.wireshark.org/lists/wireshark-users Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org?subject=unsubscribe
Current thread:
- New Journal: Journal of Cyber Forensics and Advanced Threat Investigations CyberSecurity UK (Jun 08)
- filter for jpeg can not use damker (Jun 12)
- Re: filter for jpeg can not use chuck c (Jun 13)
- Re: filter for jpeg can not use damker (Jun 14)
- Re: filter for jpeg can not use chuck c (Jun 15)
- Re: filter for jpeg can not use chuck c (Jun 13)
- filter for jpeg can not use damker (Jun 12)