Forum Discussion
hooleylist
Jan 06, 2012Cirrostratus
Hey Ian,
You could try using TCP::collect 32, but I think you'll still get whatever is in the first TCP packet when you call TCP::payload.
Can you clarify why you want just 32 bytes if you can parse the value out of the full payload?
Aaron