- For IP string-matching filters, you can create the following filter:
ip [Offset:Bytes]
- For matching application data (that is, to look into the application data that is carried by TCP or UDP), the most common uses of it are:
tcp[Offset:Bytes]
//Or
udp[Offset:Bytes]