wiredShark
显示所有非来自DHCP服务器并且bootp.type==0x02(Offer/Ack/NAK)的信息:
bootp.type==0x02 and not ip.src==192.168.15.253
2.3.3 包含(contains)
tcp contains "tcp"
ip.addr in {192.168.10.1,192.168.11.5}
ip.src in {192.168.15.1..192.168.15.180} 连续..
深度解读 · 专业分析