This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Only recieve win=65535 info packets

0

I only want to display packets which have win=65535 in the info, how to do this as filter?

asked 16 Jun '12, 03:57

solvapolva's gravatar image

solvapolva
1●1●1●1
accept rate: 0%

One Answer:

1

You can use the filter:

tcp.window_size == 65535

You can always look in the packet details for a field with it's value and then use (rightclick) Apply as filter to achieve this in an easy way :-)

answered 16 Jun '12, 04:33

SYN-bit's gravatar image

SYN-bit ♦♦
17.1k●9●57●245
accept rate: 20%