Simply use the following as your filter:
expert.message contains "Duplicate IP address"
This will search the Frame's "Expert Info" attribute for the following text: "Duplicate IP address"
Simply use the following as your filter:
expert.message contains "Duplicate IP address"
This will search the Frame's "Expert Info" attribute for the following text: "Duplicate IP address"
Nice trick! Need to make sure you replace the double quotes found in this web page, as they are not ASCII 34 double quotes, however, and wireshark will not read them as double quotes. Not sure if the site will eat my double quotes, but here goes anyway:
expert.message contains "Duplicate IP address" rather than expert.message contains “Duplicate IP address”