Get raw text for this example
CLEARHISTORY
PARAMETERS: no parameters
Clears info about the maximum size of previous packets. New packet may be smaller than previous ones. This command also makes all auto-calculated values inactive.
CLEARMASK
PARAMETERS: no parameters
The mask of packet (the set of previously defined conditions) will be cleared. New mask will correspond to any packet. This command is usually contained in headers to make the mask correspond to all packets of given type (ex: TCP packets).
POS
PARAMETERS: <new position> | <field's name>
Sets the <new position> of byte pointer. In the case of <field's name> new position will be equal to field's position.
0
// MAC address of destination
dstmac 0x111111111111
// MAC address of source
srcmac 0x222222222222
// code of higher level protocol
ethproto 30.