diff options
author | Jeffrey Smith <whydoubt@gmail.com> | 2015-08-18 22:03:41 -0500 |
---|---|---|
committer | Anders Broman <a.broman58@gmail.com> | 2015-09-11 06:31:33 +0000 |
commit | 80322d88da92969c170c915e93a33a96e12497a7 (patch) | |
tree | 516e0c526cda1291b5c2a376d40f4fb80b6ddc98 /docbook | |
parent | 86d8b8d7bfd3c76d646907d5549e552519ea8261 (diff) |
dfilter: Add membership operator
Added a new relational test: 'x in {a b c}'. The only LHS entity
supported at this time is a field. The generated DFVM operations are
equivalent to an OR'ed series of =='s, but with the redundant existence
tests removed.
Change-Id: Iddc89b81cf7ad6319aef1a2a94f93314cb721a8a
Reviewed-on: https://code.wireshark.org/review/10246
Reviewed-by: Hadriel Kaplan <hadrielk@yahoo.com>
Petri-Dish: Hadriel Kaplan <hadrielk@yahoo.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Michael Mann <mmann78@netscape.net>
Diffstat (limited to 'docbook')
-rw-r--r-- | docbook/wsug_src/WSUG_chapter_work.asciidoc | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/docbook/wsug_src/WSUG_chapter_work.asciidoc b/docbook/wsug_src/WSUG_chapter_work.asciidoc index ecce012c29..42a88657ed 100644 --- a/docbook/wsug_src/WSUG_chapter_work.asciidoc +++ b/docbook/wsug_src/WSUG_chapter_work.asciidoc @@ -386,6 +386,19 @@ Wireshark allows you to string together single ranges in a comma separated list to form compound ranges as shown above. |=============== +==== Membership Operator. +Wireshark allows you to test a field for membership in a set of values or +fields. After the field name, use the in operator followed by the set items +surrounded by braces {}. +---- +tcp.port in {80 443 8080} +---- +This can be considered a shortcut operator, as the previous expression could +have been expressed as: +---- +tcp.port == 80 || tcp.port == 443 || tcp.port == 8080 +---- + [[ChWorkBuildDisplayFilterMistake]] ==== A common mistake |