Getting ready

To step through this recipe, you will need Wireshark software and a running capture. No other prerequisites are required. The general representation of an offset filter is as follows:

Protocols[x:y] == <value>
X: Bytes from beginning of header
Y: Number of bytes to check