diff options
| author | João Valverde <j@v6e.pt> | 2022-02-25 19:37:53 +0000 |
|---|---|---|
| committer | A Wireshark GitLab Utility <gerald+gitlab-utility@wireshark.org> | 2022-03-22 12:58:04 +0000 |
| commit | 16729be2c11f69f4a1f1bd4c93d44d566e418f62 (patch) | |
| tree | 4425e2d8fec6838f392e2fd788c5602b2b21cffd /doc | |
| parent | 3e3db6cd3e916a23f60992f6ef5f0e80e04449ee (diff) | |
dfilter: Add bitwise masking of bits
Add support for masking of bits. Before the bitwise operator
could only test bits, it did not support clearing bits.
This allows testing if any combination of bits are set/unset
more naturally with a single test. Previously this was only
possible by combining several bitwise predicates.
Bitwise is implemented as a test node, even though it is not.
Maybe the test node should be renamed to something else.
Fixes #17246.
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/wireshark-filter.adoc | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/doc/wireshark-filter.adoc b/doc/wireshark-filter.adoc index 2ae289a360..f2720810d8 100644 --- a/doc/wireshark-filter.adoc +++ b/doc/wireshark-filter.adoc @@ -378,8 +378,8 @@ following bit field operation is supported: bitwise_and, & Bitwise AND -The bitwise AND operation allows testing to see if one or more bits are set. -Bitwise AND operates on integer protocol fields and slices. +The bitwise AND operation allows masking bits and testing to see if one or +more bits are set. Bitwise AND operates on integer protocol fields and slices. When testing for TCP SYN packets, you can write: |