# 过滤 find
someipsd.entry.type == 0x00
# 过滤 offer/ stopoffer 报文
someipsd.entry.serviceid == 0x1503 && someipsd.entry.type == 0x01
someip.serviceid == 0x7101 || someipsd.entry.serviceid == 0x7101
someipsd.entry.type == 0x01 # 有问题,竟然过滤不出 stopoffer
# 过滤 sub
someipsd.entry.serviceid == 0x1503 && someipsd.entry.type == 0x06
# 过滤 sub ack/nack
someipsd.entry.serviceid == 0x1503 && someipsd.entry.type == 0x07
someip.messagetype == 0x80 # respone
someip.messagetype == 0x00 # request
# method respone
someip.serviceid == 18221 && someip.methodid == 12291 && someip.messagetype == 0x80
# method request
someip.serviceid == 18221 && someip.methodid == 12291 && someip.messagetype == 0x00
# 过滤只有 method
someip.methodid < 0x8000
# 过滤 option endpoint entry
someipsd.option.type == 0x24
# 过滤 Initial Event Request
someipsd.flags.exp_init_events
someip协议过滤
最新推荐文章于 2026-07-24 10:42:33 发布
2115

被折叠的 条评论
为什么被折叠?



