- Subject: [Ethereal-users] Bit masking problem in ethereal display mode
- From: Kevin <kem2@xxxxxxx>
- Date: Fri, 16 May 2003 11:28:10 -0400
I am running into a confusing problem wit bit masking in ethereal
0.9.12 on freebsd 4.8.
What I want to do is look at the bits 0 - 5 in the 1st octet of the UDP
payload and see if it is equal to 0x02. My display filter is:
udp[8] & 0x1f = 2
When I apply this, I get an error box that reads:
The string "&" was unexpected in this context
Does some one know what i am doing wrong? This filter works in tcpdump
Thanks,
Kevin Mason