aboutsummaryrefslogtreecommitdiffstats
path: root/docbook
diff options
context:
space:
mode:
authorJeffrey Smith <whydoubt@gmail.com>2015-08-18 22:03:41 -0500
committerAnders Broman <a.broman58@gmail.com>2015-09-11 06:31:33 +0000
commit80322d88da92969c170c915e93a33a96e12497a7 (patch)
tree516e0c526cda1291b5c2a376d40f4fb80b6ddc98 /docbook
parent86d8b8d7bfd3c76d646907d5549e552519ea8261 (diff)
dfilter: Add membership operator
Added a new relational test: 'x in {a b c}'. The only LHS entity supported at this time is a field. The generated DFVM operations are equivalent to an OR'ed series of =='s, but with the redundant existence tests removed. Change-Id: Iddc89b81cf7ad6319aef1a2a94f93314cb721a8a Reviewed-on: https://code.wireshark.org/review/10246 Reviewed-by: Hadriel Kaplan <hadrielk@yahoo.com> Petri-Dish: Hadriel Kaplan <hadrielk@yahoo.com> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Michael Mann <mmann78@netscape.net>
Diffstat (limited to 'docbook')
-rw-r--r--docbook/wsug_src/WSUG_chapter_work.asciidoc13
1 files changed, 13 insertions, 0 deletions
diff --git a/docbook/wsug_src/WSUG_chapter_work.asciidoc b/docbook/wsug_src/WSUG_chapter_work.asciidoc
index ecce012c29..42a88657ed 100644
--- a/docbook/wsug_src/WSUG_chapter_work.asciidoc
+++ b/docbook/wsug_src/WSUG_chapter_work.asciidoc
@@ -386,6 +386,19 @@ Wireshark allows you to string together single ranges in a comma separated list
to form compound ranges as shown above.
|===============
+==== Membership Operator.
+Wireshark allows you to test a field for membership in a set of values or
+fields. After the field name, use the in operator followed by the set items
+surrounded by braces {}.
+----
+tcp.port in {80 443 8080}
+----
+This can be considered a shortcut operator, as the previous expression could
+have been expressed as:
+----
+tcp.port == 80 || tcp.port == 443 || tcp.port == 8080
+----
+
[[ChWorkBuildDisplayFilterMistake]]
==== A common mistake