Huawei eSpace 6805 Administrator's Manual page 106

Huawei IP Phone eSpace
6805&6810&6830&6850&6870
Administrator Guide
Filter Expression Rules
The Wireshark uses simple expressions to implement the powerful filtering function. A user
can specify the source IP address, destination IP address, and packet field contained in a
protocol or packet, or combine any of the preceding filter criteria. The Wireshark supports
various logical operations, such as ==, !=, >, <, and, or, not.
Comparison Symbols
The Wireshark can use comparison symbols (English words or operators) to form filter
expressions.
Table 5-5 Comparison symbols used in filter expressions
English
eq
ne
gt
lt
ge
le
Logical Operators
The Wireshark can use logical operators to combine multiple filter expressions. For example,
if you want to filter out packets that are transmitted using the GPRS tunneling protocol (GTP)
and through the IP address 10.138.21.5, use the filter expression gtp &&
ip.addr==10.138.21.5.
Issue 01 (2012-06-20)
Table 5-5 describes the comparison symbols used in filter expressions.
Operator
==
!=
>
<
>=
<=
Table 5-6 describes the logical operators used in filter expressions.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
5 Appendix
Description and Setting
Equal to
ip.addr==10.138.21.5
ip.addr eq 10.138.21.5
Not equal to
!(ip.addr == 10.138.21.5)
!(ip.addr eq 10.138.21.5)
Greater than
frame.pkt_len > 10
frame.pkt_len gt 10
Smaller than
frame.pkt_len < 128
frame.pkt_len lt 128
Equal to or greater than
frame.pkt_len >= 0x100
frame.pkt_len ge 0x100
Smaller than or equal to
frame.pkt_len <= 0x20
frame.pkt_len le 0x20
101