Get raw text for this example (you can click any command below to see its doc) 
/*
 	Standart tcp encapsulated in standart ip encapsulated in standart ethernet2 header
 */


INCLUDE
   
PARAMETERS: <name of file>


Starts processing the content of given file. The search of file will be performed in the current directory, all search paths (see option -I). For every path the content of samples, headers, traces folders will be also examined. You can also type just the name of file without INCLUDE
   
PARAMETERS: <name of file>


Starts processing the content of given file. The search of file will be performed in the current directory, all search paths (see option -I). For every path the content of samples, headers, traces folders will be also examined. You can also type just the name of file without INCLUDE
   
PARAMETERS: <name of file>


Starts processing the content of given file. The search of file will be performed in the current directory, all search paths (see option -I). For every path the content of samples, headers, traces folders will be also examined. You can also type just the name of file without include before it.




 before it.




 before it.




 ip
INCLUDE
   
PARAMETERS: <name of file>


Starts processing the content of given file. The search of file will be performed in the current directory, all search paths (see option -I). For every path the content of samples, headers, traces folders will be also examined. You can also type just the name of file without INCLUDE
   
PARAMETERS: <name of file>


Starts processing the content of given file. The search of file will be performed in the current directory, all search paths (see option -I). For every path the content of samples, headers, traces folders will be also examined. You can also type just the name of file without INCLUDE
   
PARAMETERS: <name of file>


Starts processing the content of given file. The search of file will be performed in the current directory, all search paths (see option -I). For every path the content of samples, headers, traces folders will be also examined. You can also type just the name of file without include before it.




 before it.




 before it.




 tcp_header

CLEARMASK
   
PARAMETERS: no parameters


The mask of packet (the set of previously defined conditions) will be cleared. New mask will correspond to any packet. This command is usually contained in headers to make the mask correspond to all packets of given type (ex: TCP packets).





ip.len = IPlen
ip.crc = IPcrc

ethproto = ip
ip.proto = tcp   
// packet's mask will contain only this conditions


POS
   
PARAMETERS: <new position> | <field's name>


Sets the <new position> of byte pointer. In the case of <field's name> new position will be equal to field's position.




 td