This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

how to filter for given set of values Filter Example : bthci_evt.code == 0x03 or bthci_evt.code == 0x05 or bthci_evt.code == 0x01 or bthci_evt.code == 0x04 Which is very long when keep adding with other filter option.

Hence, is there any alternative option for simple filter like: bthci_evt.code in {0x03 or 0x05 or 0x01 or 0x04}

asked 08 Aug, 01:49

sghorai's gravatar image

sghorai
11237
accept rate: 100%


Thx.. here is the already available solution that worked and is called Membership Operator:

bthci_evt.code in {0x03 0x05 0x01}

permanent link

answered 11 Aug, 02:29

sghorai's gravatar image

sghorai
11237
accept rate: 100%

edited 11 Aug, 02:32

sindy's gravatar image

sindy
6.0k4850

As your post answers your question, I've convered it to an Answer. As it is the correct one, please mark it as a correct answer by clicking the checkmark icon next to it. No one else but the one who has posted the Question can do this.

(11 Aug, 02:35) sindy

The syntax you look for is not supported in display filters. So your only chance to simplify the filter expression is to use logical operations like bthci_evt.code < 6 and bthci_evt.code != 0 or bthci_evt.code !=2, but that doesn't save you too much typing.

permanent link

answered 08 Aug, 02:31

sindy's gravatar image

sindy
6.0k4850
accept rate: 24%

ok. thx for your information..

(08 Aug, 03:52) sghorai

Hence, is there any alternative option for simple filter like: bthci_evt.code in {0x03 or 0x05 or 0x01 or 0x04}

No, but that might be a useful extension, so you could submit an enhancement request for that feature on the Wireshark Bugzilla.

permanent link

answered 08 Aug, 12:32

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335195
accept rate: 19%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×1,620

question asked: 08 Aug, 01:49

question was seen: 499 times

last updated: 11 Aug, 02:35

p​o​w​e​r​e​d by O​S​Q​A