In addition to Weibo, there is also WeChat
Please pay attention
WeChat public account
Shulou
2025-04-03 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Servers >
Share
Shulou(Shulou.com)06/01 Report--
This article is to share with you about the Wireshark operator! = why it does not work properly, the editor thinks it is very practical, so I share it with you to learn. I hope you can get something after reading this article. Without saying much, let's take a look at it.
The Wireshark operator! = does not work properly
In Wireshark, the operator! = usually doesn't work properly when combined with expressions like eth.addr, ip.addr, tcp.port, and udp.port. When in use, Wireshark displays a warning message "! = has been deprecated or may have unexpected results, please refer to the user's Guide" and the filter background color is yellow. For example, display filters all host packets except IP address 1.2.3.4, written as ip.addr! = 1.2.3.4.
At this point, the filter ip.addr! = 1.2.3.4 is not working properly. Because ip.addr! = 1.2.3.4 indicates that the packet contains a field called ip.addr, whose value is different from 1.2.3.4. Because the IP Datagram contains both source and destination addresses, the expression evaluates to true when at least one of the two addresses is different from 1.2.3.4.
Therefore, if you want to filter out packets other than the IP address 1.2.3.4, the correct filter should be! (ip.addr==1.2.3.4).
This is why the Wireshark operator! = does not work properly. The editor believes that there are some knowledge points that we may see or use in our daily work. I hope you can learn more from this article. For more details, please follow the industry information channel.
Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.
Views: 205
*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.
Continue with the installation of the previous hadoop.First, install zookooper1. Decompress zookoope
"Every 5-10 years, there's a rare product, a really special, very unusual product that's the most un
© 2024 shulou.com SLNews company. All rights reserved.